Medium severity6.5NVD Advisory· Published Sep 14, 2016· Updated Jun 17, 2026
CVE-2016-4271
CVE-2016-4271
Description
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4277 and CVE-2016-4278, aka a "local-with-filesystem Flash sandbox bypass" issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <18.0.0.375, <23.0.0.162, <11.2.202.635
- osv-coords2 versionspkg:rpm/suse/flash-player&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1pkg:rpm/suse/flash-player&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP1
< 11.2.202.635-140.1+ 1 more
- (no CPE)range: < 11.2.202.635-140.1
- (no CPE)range: < 11.2.202.635-140.1
Patches
Vulnerability mechanics
References
6- helpx.adobe.com/security/products/flash-player/apsb16-29.htmlnvdPatchVendor Advisory
- blog.bjornweb.nl/2017/02/flash-bypassing-local-sandbox-data-exfiltration-credentials-leak/nvdExploitThird Party Advisory
- lab.truel.it/flash-sandbox-bypass/nvdBroken LinkTechnical DescriptionThird Party Advisory
- rhn.redhat.com/errata/RHSA-2016-1865.htmlnvdThird Party Advisory
- www.securitytracker.com/id/1036791nvdBroken LinkThird Party AdvisoryVDB Entry
- security.gentoo.org/glsa/201610-10nvdThird Party Advisory
News mentions
0No linked articles in our index yet.