← CVE Radar
CVE-2016-7892Adobe Flash Player Use-After-Free Vulnerability
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.
8.8 HIGHEPSS 19.07%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Apr 15, 2022
The impacted product is end-of-life and should be disconnected if still in use.
Details
- CVE ID
- CVE-2016-7892
- Status
- Analyzed
- Assigner (CNA)
- adobe
- Published
- Dec 15, 2016
- Last modified
- 2026-06-17 00:53 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier1 version range
- Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-2947.html
- securityfocus.com http://www.securityfocus.com/bid/94877
- securitytracker.com http://www.securitytracker.com/id/1037442
- docs.microsoft.com https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154
- helpx.adobe.com https://helpx.adobe.com/security/products/flash-player/apsb16-39.html
- security.gentoo.org https://security.gentoo.org/glsa/201701-17
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7892