CVE Watch10 de set. de 2026

CVE-2016-4117

Adobe Flash Player Arbitrary Code Execution Vulnerability

CVSS

9.8

Crítica

EPSS

94.3%

p100

KEV

SIM

3 de mar. de 2022

Exploit Today

0-100

Publicado: 11 de mai. de 2016 · Última mod.: 10 de set. de 2026

EPSS · 30d

94.3%EPSS · 30 dias94.4%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Adobe / Flash Player

Vulnerabilidade

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adicionado ao KEV

3 de mar. de 2022

Corrigir até

24 de mar. de 2022

Uso conhecido em ransomware

Sim

Descrição resumida

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

Ação necessária

The impacted product is end-of-life and should be disconnected if still in use.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2016-4117

Descrição técnica

Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2018-159827.8 ALT

99.8%

KEV—80Adobe Flash Player Use-After-Free Vulnerability35d CVE-2016-10199.8 CRÍ

97.7%

KEV—79Adobe Flash Player Arbitrary Code Execution Vulnerability35d CVE-2015-3113—

100.0%

KEV—80Adobe Flash Player Heap-Based Buffer Overflow Vulnerability—CVE-2014-0497—

100.0%

KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2015-5119—

99.9%

KEV—80Adobe Flash Player Use-After-Free Vulnerability—CVE-2011-0611—

99.9%

KEV—80Adobe Flash Player Remote Code Execution Vulnerability—