{"id":"CVE-2016-4171","aliases":["EUVD-2016-5172","GHSA-mgfm-9xxf-m8pm","MGASA-2016-0228","RHSA-2016:1238","SUSE-SU-2016:1613-1","UBUNTU-CVE-2016-4171"],"status":"published","title":"Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to...","description":"Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.20055,"percentile":0.97458,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":true},"published":"2016-06-16T14:00:00Z","modified":"2026-06-29T10:12:42Z","kev":{"date_added":"2022-03-25","due_date":"2022-04-15","required_action":"The impacted product is end-of-life and should be disconnected if still in use.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-03-25"},{"source":"kev","since":"2022-03-25"}],"fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","fixed_in":["11.2.202.626ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"flashplugin-nonfree","fixed_in":["11.2.202.626ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:5","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.626-1.1.mga5.nonfree"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.626-1.el5_11"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.626-1.el5_11"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.626-1.el6_8"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.626-133.1"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.626-133.1"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.626-133.1"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.626-133.1"}]}],"bundled":36},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.626ubuntu0.14.04.1"}]}],"versions":["11.2.202.310ubuntu1","11.2.202.327ubuntu0.13.10.1","11.2.202.332ubuntu1","11.2.202.335ubuntu1","11.2.202.336ubuntu1","11.2.202.341ubuntu1","11.2.202.346ubuntu1","11.2.202.350ubuntu1","11.2.202.356ubuntu0.14.04.1","11.2.202.359ubuntu0.14.04.1","11.2.202.378ubuntu0.14.04.1","11.2.202.394ubuntu0.14.04.1","11.2.202.400ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.2","11.2.202.411ubuntu0.14.04.1","11.2.202.418ubuntu0.14.04.1","11.2.202.424ubuntu0.14.04.1","11.2.202.425ubuntu0.14.04.1","11.2.202.429ubuntu0.14.04.1","11.2.202.438ubuntu0.14.04.1","11.2.202.440ubuntu0.14.04.1","11.2.202.442ubuntu0.14.04.1","11.2.202.451ubuntu0.14.04.1","11.2.202.457ubuntu0.14.04.1","11.2.202.460ubuntu0.14.04.1","11.2.202.466ubuntu0.14.04.1","11.2.202.468ubuntu0.14.04.1","11.2.202.481ubuntu0.14.04.1","11.2.202.481ubuntu0.14.04.2","11.2.202.491ubuntu0.14.04.1","11.2.202.508ubuntu0.14.04.1","11.2.202.521ubuntu0.14.04.1","11.2.202.535ubuntu0.14.04.1","11.2.202.540ubuntu0.14.04.2","11.2.202.548ubuntu0.14.04.1","11.2.202.554ubuntu0.14.04.1","11.2.202.559ubuntu0.14.04.1","11.2.202.569ubuntu0.14.04.1","11.2.202.577ubuntu0.14.04.1","11.2.202.616ubuntu0.14.04.1","11.2.202.621ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"flashplugin-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.626ubuntu0.16.04.1"}]}],"versions":["11.2.202.540ubuntu2","11.2.202.548ubuntu1","11.2.202.554ubuntu1","11.2.202.559ubuntu1","11.2.202.569ubuntu1","11.2.202.577ubuntu1","11.2.202.616ubuntu1","11.2.202.621ubuntu0.16.04.1"]}],"products":[{"vendor":"adobe","product":"flash player"},{"vendor":"adobe","product":"flash_player"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_workstation_extension"}],"references":[{"url":"https://security.gentoo.org/glsa/201606-08","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsa16-03.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","article","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/748992","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1238","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036094","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91184","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-18.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web","article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4171","tags":["government-resource","US Government Resource"]},{"url":"https://github.com/cisagov/vulnrichment/issues/196","tags":["issue-tracking","Issue Tracking"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4171","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mgfm-9xxf-m8pm"},{"url":"https://advisories.mageia.org/MGASA-2016-0228.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18720","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346665","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1238.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4122","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4122","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4122","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4123","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4123","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4123","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4124","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4124","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4124","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4125","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4125","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4125","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4127","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4127","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4128","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4128","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4128","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4129","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4131","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4132","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4132","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4132","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4135","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4135","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4136","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4137","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4138","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4138","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4139","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4139","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4140","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4141","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4142","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4142","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4145","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4146","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4146","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4146","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4147","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4148","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4148","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4149","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4150","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4150","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4151","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4151","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4152","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4152","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4152","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4153","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4154","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4154","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4154","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4155","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4156","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4171","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4171","tags":["advisory","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161613-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/984695","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4171","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-4171","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-4171","description":"Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","status":"published","published":"2016-06-16T14:00:00Z","modified":"2025-11-17T19:40:40.799Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:33:34.815789Z"}],"euvd":[{"id":"EUVD-2016-5172","description":"Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","status":"published","published":"2016-06-16T14:00:00Z","modified":"2025-11-17T19:40:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-03-25","updated_at":"2026-11-02T19:49:16.200687Z"}],"ghsa":[{"id":"GHSA-mgfm-9xxf-m8pm","title":"Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to...","description":"Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","status":"published","published":"2022-05-13T01:04:49Z","modified":"2025-11-17T21:32:21Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:04:50.199532Z"}],"kev":[{"id":"CVE-2016-4171","title":"Adobe Flash Player Remote Code Execution Vulnerability","description":"Unspecified vulnerability in Adobe Flash Player allows for remote code execution.","kev":{"date_added":"2022-03-25","due_date":"2022-04-15","required_action":"The impacted product is end-of-life and should be disconnected if still in use.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2016-4171","description":"Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","status":"published","published":"2016-06-16T14:59:51.017Z","modified":"2026-06-17T00:47:02.337Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:26.642445Z"}],"osv":[{"id":"UBUNTU-CVE-2016-4171","description":"Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","status":"published","published":"2016-06-16T14:59:00Z","modified":"2025-11-19T16:49:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:12.261906Z"},{"id":"MGASA-2016-0228","title":"Updated flash-player-plugin packages fix security vulnerabilities","description":"Adobe Flash Player 11.2.202.626 contains fixes to critical security\nvulnerabilities found in earlier versions that could potentially\nallow an attacker to take control of the affected system.\n\nThis update resolves type confusion vulnerabilities that could lead to\ncode execution (CVE-2016-4144, CVE-2016-4149).\n\nThis update resolves use-after-free vulnerabilities that could lead to\ncode execution (CVE-2016-4142, CVE-2016-4143, CVE-2016-4145,\nCVE-2016-4146, CVE-2016-4147, CVE-2016-4148).\n\nThis update resolves heap buffer overflow vulnerabilities that could\nlead to code execution (CVE-2016-4135, CVE-2016-4136, CVE-2016-4138).\n\nThis update resolves memory corruption vulnerabilities that could lead\nto code execution (CVE-2016-4122, CVE-2016-4123, CVE-2016-4124,\nCVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130,\nCVE-2016-4131, CVE-2016-4132, CVE-2016-4133, CVE-2016-4134, CVE-2016-4137,\nCVE-2016-4141, CVE-2016-4150, CVE-2016-4151, CVE-2016-4152, CVE-2016-4153,\nCVE-2016-4154, CVE-2016-4155, CVE-2016-4156, CVE-2016-4166, CVE-2016-4171).\n\nThis update resolves a vulnerability in the directory search path used to\nfind resources that could lead to code execution (CVE-2016-4140).\n\nThis update resolves a vulnerability that could be exploited to bypass the\nsame-origin-policy and lead to information disclosure (CVE-2016-4139). \n\nAdobe reports that an exploit for CVE-2016-4171 exists in the wild.\n","status":"published","published":"2016-06-17T05:58:14Z","modified":"2026-04-16T06:23:57.770068796Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"RHSA-2016:1238","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T11:32:49Z","modified":"2026-06-29T10:12:42Z","updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"SUSE-SU-2016:1613-1","title":"Security update for flash-player","description":"\nAdobe flash-player was updated to 11.2.202.626 to fix the following security issues:\n\nSecurity update to 11.2.202.626 (boo#984695):\n* APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124,\n  CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129,\n  CVE-2016-4130, CVE-2016-4131, CVE-2016-4132, CVE-2016-4133,\n  CVE-2016-4134, CVE-2016-4135, CVE-2016-4136, CVE-2016-4137,\n  CVE-2016-4138, CVE-2016-4139, CVE-2016-4140, CVE-2016-4141,\n  CVE-2016-4142, CVE-2016-4143, CVE-2016-4144, CVE-2016-4145,\n  CVE-2016-4146, CVE-2016-4147, CVE-2016-4148, CVE-2016-4149,\n  CVE-2016-4150, CVE-2016-4151, CVE-2016-4152, CVE-2016-4153,\n  CVE-2016-4154, CVE-2016-4155, CVE-2016-4156, CVE-2016-4166,\n  CVE-2016-4171\n\nPlease see https://helpx.adobe.com/security/products/flash-player/apsb16-18.html\nfor more information.\n","status":"published","published":"2016-06-17T12:52:28Z","modified":"2026-02-04T03:28:51.985084Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}