CVE-2016-1098
HIGHAdobe Flash Player <=21.0.0.213 in IE/Edge - Second Impact Unknown
Title source: manualDescription
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
References (6)
Core 6
Core References
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/90618
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1035827
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-064
Various Sources x_refsource_confirm
https://helpx.adobe.com/security/products/flash-player/apsb16-15.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2016-1079.html
Scores
CVSS v3
7.5
EPSS
0.0956
EPSS Percentile
95.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
Status
published
Products (4)
adobe/flash_player
< 21.0.0.213
microsoft/edge
microsoft/internet_explorer
10
microsoft/internet_explorer
11
Published
May 11, 2016
Tracked Since
Feb 18, 2026