CVE-2016-4122

High

Description

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

SeverityHigh
CVSS8.8
Exploit probability—
ProductAdobe Flash Player Desktop Runtime
PublishedJun 16, 2016
First seenJun 16, 2016

How to fix

Affected products

ProductAffected versionsFixed in
adobe flash_player_desktop_runtimev ≤ 21.0.0.242—
redhat enterprise_linux_desktop5.0, 6.0—
redhat enterprise_linux_server5.0, 6.0—
redhat enterprise_linux_workstation5.0, 6.0—
adobe flash_playerv ≤ 11.2.202.621, v ≤ 18.0.0.352, v ≤ 21.0.0.242—
opensuse opensuse13.1, 13.2—
suse linux_enterprise_desktop12—
suse linux_enterprise_workstation_extension12—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.