CVE-2016-4138
CRITICALAdobe Flash Player <21.0.0.242 - Unknown Vuln
Title source: llmDescription
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Google Security Research · textdosmultiple
https://www.exploit-db.com/exploits/40090
References (8)
Scores
CVSS v3
9.8
EPSS
0.6071
EPSS Percentile
98.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (15)
adobe/flash_player
adobe/flash_player
< 11.2.202.621
adobe/flash_player
< 18.0.0.352
adobe/flash_player
< 21.0.0.242 (3 CPE variants)
adobe/flash_player_desktop_runtime
< 21.0.0.242
opensuse/opensuse
13.1
opensuse/opensuse
13.2
redhat/enterprise_linux_desktop
5.0
redhat/enterprise_linux_desktop
6.0
redhat/enterprise_linux_server
5.0
... and 5 more
Published
Jun 16, 2016
Tracked Since
Feb 18, 2026