CVE-2016-4126
Last modified
CVE-2016-4126 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.. EPSS estimates a 4.05% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Air Desktop Runtime | <= 21.0.0.215 |
References
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-083Patch, Third Party Advisory
- https://helpx.adobe.com/security/products/air/apsb16-23.htmlPatch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-083Patch, Third Party Advisory
- https://helpx.adobe.com/security/products/air/apsb16-23.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-4126?
How severe is CVE-2016-4126?
How do I fix CVE-2016-4126?
Are you affected by CVE-2016-4126?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST