CVE-2016-7892

תיאור (מקור, אנגלית)

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.

מדדים

CVSS 3.1

8.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

19% (אחוזון 100) נכון ל-24/7/2026

CWE

CWE-416

מוצרים מושפעים

adobe: flash player desktop runtime; apple: mac os x; microsoft: windows; adobe: flash player; microsoft: windows 10; microsoft: windows 8.1; google: chrome os; linux: linux kernel

קישורים

• https://helpx.adobe.com/security/products/flash-player/apsb16-39.html PatchVendor Advisory
• https://helpx.adobe.com/security/products/flash-player/apsb16-39.html PatchVendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-‮… PatchThird Party Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-‮… PatchThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html Broken Link
• http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html Broken Link
• http://rhn.redhat.com/errata/RHSA-2016-2947.html Third Party Advisory
• http://www.securityfocus.com/bid/94877 Third Party AdvisoryVDB Entry
• http://www.securitytracker.com/id/1037442 Broken LinkThird Party AdvisoryVDB Entry
• https://security.gentoo.org/glsa/201701-17 Third Party Advisory