CVE-2016-4137

HIGH 8.8CVE-2016-4137 · Published 16/06/2016 · updated 17/06/2026

Package	Affected versions	Patched versions
flash player adobe	`≤ 11.2.202.621≤ 18.0.0.352≤ 21.0.0.242`	No fix yet
flash player desktop runtime adobe	`≤ 21.0.0.242`	No fix yet

Description

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

References

lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html · Broken Link
lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html · Broken Link
lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html · Broken Link
securitytracker.com/id/1036117 · Third Party Advisory
access.redhat.com/errata/RHSA-2016:1238 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-083 · Patch
helpx.adobe.com/security/products/flash-player/apsb16-18.html · Vendor Advisory
exploit-db.com/exploits/40089 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free