Adobe Flash Player Remote Code Execution Vulnerability

CRITICAL 9.8EXPLOITED (CISA KEV)CVE-2016-4171 · Published 16/06/2016 · updated 17/06/2026

Adobe Flash Player Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/03/2022. Patch affected systems as an emergency.

In short

CVE-2016-4171 is a CRITICAL (CVSS 9.8) vulnerability affecting flash player (adobe).
Exploited in the wild: CISA added it to the KEV catalog on 25/03/2022.
Chance of exploitation in the next 30 days (EPSS): 20.1%, higher than 97.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
flash player adobe	`≤ 11.2.202.621≤ 18.0.0.352≤ 21.0.0.242`	No fix yet

Description

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

References

lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html · Mailing List
securityfocus.com/bid/91184 · Third Party Advisory
securitytracker.com/id/1036094 · Third Party Advisory
access.redhat.com/errata/RHSA-2016:1238 · Third Party Advisory
helpx.adobe.com/security/products/flash-player/apsa16-03.html · Vendor Advisory
helpx.adobe.com/security/products/flash-player/apsb16-18.html · Vendor Advisory
security.gentoo.org/glsa/201606-08 · Third Party Advisory
kb.cert.org/vuls/id/748992 · Third Party Advisory
cisagov/vulnrichment · Issue Tracking

More vulnerabilities in flash player

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2016-4171 is a CRITICAL (CVSS 9.8) vulnerability affecting flash player (adobe).

Exploited in the wild: CISA added it to the KEV catalog on 25/03/2022.

Chance of exploitation in the next 30 days (EPSS): 20.1%, higher than 97.4% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

flash player

adobe

≤ 11.2.202.621≤ 18.0.0.352≤ 21.0.0.242

No fix yet

More vulnerabilities in flash player

See all →