CVE-2016-4117
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA, has a working public exploit and 1 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
The impacted product is end-of-life and should be disconnected if still in use.
Adobe Flash Player versions up to 21.0.0.226 contain a vulnerability that allows attackers to run malicious code on a user's computer. This flaw was actively exploited by criminals in May 2016, making it a critical security threat.
A remote code execution vulnerability exists in Adobe Flash Player 21.0.0.226 and earlier through unspecified attack vectors. The vulnerability was actively exploited in the wild in May 2016, indicating high practical exploitability and demonstrating arbitrary code execution capability on affected systems.
The full analysis of this CVE is available in Portuguese →