{"id":"CVE-2016-7892","aliases":["EUVD-2016-8741","GHSA-gxjf-m829-568r","MGASA-2017-0014","RHSA-2016:2947","SUSE-SU-2016:3148-1"],"status":"published","title":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...","description":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.19078,"percentile":0.97329,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":false},"cwes":["CWE-416"],"published":"2016-12-14T10:10:26Z","modified":"2026-06-29T10:14:40Z","kev":{"date_added":"2022-03-25","due_date":"2022-04-15","required_action":"The impacted product is end-of-life and should be disconnected if still in use.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-03-25"},{"source":"kev","since":"2022-03-25"}],"affected":[{"source":"osv","ecosystem":"Mageia:5","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0.194-1.mga5.nonfree"}]}],"bundled":30},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:24.0.0.186-1.el6_8"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0.186-152.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.0.186-152.1"}]}],"bundled":17}],"products":[{"vendor":"adobe","product":"flash player"},{"vendor":"adobe","product":"flash_player"},{"vendor":"adobe","product":"flash_player_desktop_runtime"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154","tags":["vendor-advisory","x_refsource_MS","x_transferred","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201701-17","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1037442","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2947.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-39.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","web","article"]},{"url":"http://www.securityfocus.com/bid/94877","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7892","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7892","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gxjf-m829-568r"},{"url":"https://advisories.mageia.org/MGASA-2017-0014.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19960","tags":["report"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb17-02.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2947","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404307","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2947.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7867","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7867","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7867","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7868","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7868","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7868","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7869","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7869","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7870","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7870","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7870","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7871","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7871","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7871","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7872","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7872","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7872","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7873","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7873","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7874","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7874","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7874","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7875","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7875","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7875","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7876","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7876","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7876","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7877","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7877","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7878","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7878","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7878","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7879","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7879","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7880","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7880","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7881","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7881","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7890","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7890","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7892","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7892","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163148-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1015379","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7892","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-7892","description":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.","status":"published","published":"2016-12-15T06:31:00Z","modified":"2025-10-21T23:55:47.528Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:33:36.175943Z"}],"euvd":[{"id":"EUVD-2016-8741","description":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.","status":"published","published":"2016-12-15T06:31:00Z","modified":"2025-10-21T23:55:47Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-03-25","updated_at":"2026-11-02T19:49:39.684828Z"}],"ghsa":[{"id":"GHSA-gxjf-m829-568r","title":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...","description":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.","status":"published","published":"2022-05-14T02:21:34Z","modified":"2025-10-22T00:32:22Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:05.344883Z"}],"kev":[{"id":"CVE-2016-7892","title":"Adobe Flash Player Use-After-Free Vulnerability","description":"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.","cwes":["CWE-416"],"kev":{"date_added":"2022-03-25","due_date":"2022-04-15","required_action":"The impacted product is end-of-life and should be disconnected if still in use.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2016-7892","description":"Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.","status":"published","published":"2016-12-15T06:59:56.313Z","modified":"2026-06-17T00:53:43.09Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:03:32.79141Z"}],"osv":[{"id":"RHSA-2016:2947","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T14:38:10Z","modified":"2026-06-29T10:14:40Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"MGASA-2017-0014","title":"Updated flash-player-plugin packages fix security vulnerabilities","description":"Adobe Flash Player 24.0.0.194 contains fixes to critical security\nvulnerabilities found in earlier versions that could potentially allow\nan attacker to take control of the affected system.\n\nAdobe is aware of a report that an exploit for CVE-2016-7892 exists in\nthe wild, and is being used in limited, targeted attacks against users\nrunning Internet Explorer (32-bit) on Windows.\n\nThis update resolves security bypass vulnerabilities (CVE-2016-7890,\nCVE-2017-2938).\n\nThis update resolves use-after-free vulnerabilities that could lead to\ncode execution (CVE-2016-7872, CVE-2016-7877, CVE-2016-7878,\nCVE-2016-7879, CVE-2016-7880, CVE-2016-7881, CVE-2016-7892,\nCVE-2017-2932, CVE-2017-2936, CVE-2017-2937). \n\nThis update resolves buffer overflow vulnerabilities that could lead to\ncode execution (CVE-2016-7867, CVE-2016-7868, CVE-2016-7869,\nCVE-2016-7870, CVE-2017-2927, CVE-2017-2933, CVE-2017-2934,\nCVE-2017-2935).\n\nThis update resolves memory corruption vulnerabilities that could lead\nto code execution (CVE-2016-7871, CVE-2016-7873, CVE-2016-7874,\nCVE-2016-7875, CVE-2016-7876, CVE-2017-2925, CVE-2017-2926,\nCVE-2017-2928, CVE-2017-2930, CVE-2017-2931).\n\nNote that Adobe has dropped Adobe Access DRM support from all their\nLinux releases since their 11.2 release series (which no longer gets\nsecurity updates), so any Flash content protected with Adobe Access\nwill no longer work.\n","status":"published","published":"2017-01-13T10:32:16Z","modified":"2026-04-16T06:23:04.169563423Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2016:3148-1","title":"Security update for flash-player","description":"\nThis update for flash-player fixes the following issues:\n\n- Security update to 24.0.0.186 (bsc#1015379) APSB16-39:\n    * These updates resolve use-after-free vulnerabilities that could have\n      lead to code execution (CVE-2016-7872, CVE-2016-7877, CVE-2016-7878,\n      CVE-2016-7879, CVE-2016-7880, CVE-2016-7881, CVE-2016-7892).\n    * These updates resolve buffer overflow vulnerabilities that could have lead to\n      code execution (CVE-2016-7867, CVE-2016-7868, CVE-2016-7869, CVE-2016-7870).\n    * These updates resolve memory corruption vulnerabilities that could have lead to\n      code execution (CVE-2016-7871, CVE-2016-7873, CVE-2016-7874,\n      CVE-2016-7875, CVE-2016-7876).\n    * These updates resolve a security bypass vulnerability (CVE-2016-7890).\n- Keep standalone flashplayer at version 11, no newer version\n  exists (INSECURE!).\n- Update EULA to version 24.0.\n","status":"published","published":"2016-12-14T10:10:26Z","modified":"2026-02-04T02:53:47.852715Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}