← All CVEs

CVE-2016-4273

high · 8.8

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

8.8
CVSS
19.9%
EPSS (exploit prob.)
97th
EPSS percentile
2016-10-13
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

VendorProductAffected versions
adobeflash_player<= 23.0.0.162
applemac_os_xall versions
googlechrome_osall versions
linuxlinux_kernelall versions
microsoftwindowsall versions
adobeflash_player<= 23.0.0.162
adobeflash_player<= 23.0.0.162
microsoftwindows_10all versions
microsoftwindows_8.1all versions
applemac_os_xall versions
microsoftwindowsall versions
adobeflash_player<= 18.0.0.375
adobeflash_player_desktop_runtime<= 23.0.0.162
adobeflash_player<= 11.2.202.635
linuxlinux_kernelall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-4273