CVE-2016-7855

CVE Published 2016-11-01
Related CWE(s) CWE-416: Use After Free
Related Vendor(s) adobe, redhat
Related Product(s) enterprise_linux_server, flash_player, enterprise_linux_workstation, enterprise_linux_desktop
Exploitation Reported (CISA KEV) 2022-03-03
CVSS 3 Base Score 8.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References