VYPR
High severity8.8NVD Advisory· Published Nov 8, 2016· Updated May 6, 2026

CVE-2016-7860

CVE-2016-7860

Description

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products

12
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*range: <=23.0.0.205
    • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*range: <=23.0.0.205
    • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*range: <=23.0.0.205
    • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*range: <=23.0.0.205
  • cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:*
    Range: <=11.2.202.643
  • cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
  • Range: Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.