{"id":"CVE-2016-0984","aliases":["EUVD-2016-0994","GHSA-wg97-qrh5-p5pr","MGASA-2016-0062","RHSA-2016:0166","SUSE-SU-2016:0398-1","SUSE-SU-2016:0400-1","UBUNTU-CVE-2016-0984"],"status":"published","title":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20...","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.54544,"percentile":0.99024,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-416"],"published":"2016-02-09T19:05:34Z","modified":"2026-06-29T10:11:25Z","kev":{"date_added":"2022-05-25","due_date":"2022-06-15","required_action":"The impacted products are end-of-life and should be disconnected if still in use.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-05-25"},{"source":"kev","since":"2022-05-25"}],"exploits":[{"source":"exploitdb","id":"EDB-39462","title":"Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer","type":"dos","platform":"multiple","date":"2016-02-17","verified":true,"url":"https://www.exploit-db.com/exploits/39462"}],"fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","fixed_in":["11.2.202.569ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:5","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.569-1.mga5.nonfree"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.569-1.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.569-1.el5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.569-1.el6_7"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.569-120.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.569-120.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.569-120.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.569-120.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.569-0.35.1"}]}],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.569ubuntu0.14.04.1"}]}],"versions":["11.2.202.310ubuntu1","11.2.202.327ubuntu0.13.10.1","11.2.202.332ubuntu1","11.2.202.335ubuntu1","11.2.202.336ubuntu1","11.2.202.341ubuntu1","11.2.202.346ubuntu1","11.2.202.350ubuntu1","11.2.202.356ubuntu0.14.04.1","11.2.202.359ubuntu0.14.04.1","11.2.202.378ubuntu0.14.04.1","11.2.202.394ubuntu0.14.04.1","11.2.202.400ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.2","11.2.202.411ubuntu0.14.04.1","11.2.202.418ubuntu0.14.04.1","11.2.202.424ubuntu0.14.04.1","11.2.202.425ubuntu0.14.04.1","11.2.202.429ubuntu0.14.04.1","11.2.202.438ubuntu0.14.04.1","11.2.202.440ubuntu0.14.04.1","11.2.202.442ubuntu0.14.04.1","11.2.202.451ubuntu0.14.04.1","11.2.202.457ubuntu0.14.04.1","11.2.202.460ubuntu0.14.04.1","11.2.202.466ubuntu0.14.04.1","11.2.202.468ubuntu0.14.04.1","11.2.202.481ubuntu0.14.04.1","11.2.202.481ubuntu0.14.04.2","11.2.202.491ubuntu0.14.04.1","11.2.202.508ubuntu0.14.04.1","11.2.202.521ubuntu0.14.04.1","11.2.202.535ubuntu0.14.04.1","11.2.202.540ubuntu0.14.04.2","11.2.202.548ubuntu0.14.04.1","11.2.202.554ubuntu0.14.04.1","11.2.202.559ubuntu0.14.04.1"]}],"products":[{"vendor":"adobe","product":"air_desktop_runtime"},{"vendor":"adobe","product":"air_sdk"},{"vendor":"adobe","product":"air_sdk_\\\u0026_compiler"},{"vendor":"adobe","product":"flash player and air"},{"vendor":"adobe","product":"flash_player"},{"vendor":"adobe","product":"flash_player_desktop_runtime"}],"references":[{"url":"https://www.exploit-db.com/exploits/39462/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1034970","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201603-07","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0166.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Third Party Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-04.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","web","article","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0984","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0984","tags":["advisory"]},{"url":"https://www.exploit-db.com/exploits/39462"},{"url":"https://github.com/advisories/GHSA-wg97-qrh5-p5pr"},{"url":"https://advisories.mageia.org/MGASA-2016-0062.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17721","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0166","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306015","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0166.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0964","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0964","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0964","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0965","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0965","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0965","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0966","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0966","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0966","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0967","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0967","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0968","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0968","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0968","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0969","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0969","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0969","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0970","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0970","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0970","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0971","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0971","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0971","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0972","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0972","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0972","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0973","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0973","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0973","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0974","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0975","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0975","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0975","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0977","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0978","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0979","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0980","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0981","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0981","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0982","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0982","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0982","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0983","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0983","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0984","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0984","tags":["advisory","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0985","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0985","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0985","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160398-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/965901","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0985","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160400-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-0984","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-0984","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","status":"published","published":"2016-02-10T20:00:00Z","modified":"2025-10-21T23:55:55.589Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:33:37.446553Z"}],"euvd":[{"id":"EUVD-2016-0994","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","status":"published","published":"2016-02-10T20:00:00Z","modified":"2025-10-21T23:55:55Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-05-25","updated_at":"2026-11-02T19:49:39.684828Z"}],"ghsa":[{"id":"GHSA-wg97-qrh5-p5pr","title":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20...","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","status":"published","published":"2022-05-17T01:08:11Z","modified":"2025-10-22T00:32:17Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:04.786232Z"}],"kev":[{"id":"CVE-2016-0984","title":"Adobe Flash Player and AIR Use-After-Free Vulnerability","description":"Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.","cwes":["CWE-416"],"kev":{"date_added":"2022-05-25","due_date":"2022-06-15","required_action":"The impacted products are end-of-life and should be disconnected if still in use.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2016-0984","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","status":"published","published":"2016-02-10T20:59:32.563Z","modified":"2026-06-17T00:38:36.37Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:03:21.143462Z"}],"osv":[{"id":"UBUNTU-CVE-2016-0984","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK \u0026 Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","status":"published","published":"2016-02-10T20:59:00Z","modified":"2025-07-16T07:33:50.5153Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"MGASA-2016-0062","title":"Updated flash-player-plugin packages fix security vulnerabilities","description":"Adobe Flash Player 11.2.202.569 contains fixes to critical security \nvulnerabilities found in earlier versions that could potentially allow an \nattacker to take control of the affected system.\n\nThis update resolves a type confusion vulnerability that could lead to code \nexecution (CVE-2016-0985).\n\nThis update resolves use-after-free vulnerabilities that could lead to code \nexecution (CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, \nCVE-2016-0983, CVE-2016-0984).\n\nThis update resolves a heap buffer overflow vulnerability that could lead to \ncode execution (CVE-2016-0971).\n\nThis update resolves memory corruption vulnerabilities that could lead to code \nexecution (CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, \nCVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, \nCVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, CVE-2016-0981).\n","status":"published","published":"2016-02-09T19:05:34Z","modified":"2026-04-16T06:22:28.968252346Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"RHSA-2016:0166","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T12:26:40Z","modified":"2026-06-29T10:11:25Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2016:0398-1","title":"Security update for flash-player","description":"\nThis update for flash-player fixes the following issues:\n\n- Security update to 11.2.202.569 (bsc#965901):\n  * APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966,\n    CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970,\n    CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974,\n    CVE-2016-0975, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978,\n    CVE-2016-0979, CVE-2016-0980, CVE-2016-0981, CVE-2016-0982,\n    CVE-2016-0983, CVE-2016-0984, CVE-2016-0985\n","status":"published","published":"2016-02-10T09:08:38Z","modified":"2026-02-04T02:33:12.877418Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0400-1","title":"Security update for flash-player","description":"\nThis update for flash-player fixes the following issues:\n\n- Security update to 11.2.202.569 (bsc#965901):\n  * APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966,\n    CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970,\n    CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974,\n    CVE-2016-0975, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978,\n    CVE-2016-0979, CVE-2016-0980, CVE-2016-0981, CVE-2016-0982,\n    CVE-2016-0983, CVE-2016-0984, CVE-2016-0985\n","status":"published","published":"2016-02-10T09:08:28Z","modified":"2026-02-04T04:03:24.68523Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}