alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2016-4105 (published 2016-05-11)
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063, CVE-2016-1064, CVE-2016-1071, CVE-2016-1072, CVE-2016-1073, CVE-2016-1074, CVE-2016-1076, CVE-2016-1077, CVE-2016-1078, CVE-2016-1080, CVE-2016-1081, CVE-2016-1082, CVE-2016-1083, CVE-2016-1084, CVE-2016-1085, CVE-2016-1086, CVE-2016-1088, CVE-2016-1093, CVE-2016-1095, CVE-2016-1116, CVE-2016-1118, CVE-2016-1119, CVE-2016-1120, CVE-2016-1123, CVE-2016-1124, CVE-2016-1125, CVE-2016-1126, CVE-2016-1127, CVE-2016-1128, CVE-2016-1129, CVE-2016-1130, CVE-2016-4088, CVE-2016-4089, CVE-2016-4090, CVE-2016-4093, CVE-2016-4094, CVE-2016-4096, CVE-2016-4097, CVE-2016-4098, CVE-2016-4099, CVE-2016-4100, CVE-2016-4101, CVE-2016-4103, and CVE-2016-4104.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: adobe, apple, microsoft
Affected products: acrobat, acrobat_dc, acrobat_reader_dc, mac_os_x, reader, windows
CVE-2016-4106 (published 2016-05-11)
Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows local users to gain privileges via a Trojan horse resource in an unspecified directory, a different vulnerability than CVE-2016-1087 and CVE-2016-1090.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, microsoft
Affected products: acrobat, acrobat_dc, acrobat_reader_dc, mac_os_x, reader, windows
CVE-2016-4107 (published 2016-05-11)
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1045, CVE-2016-1046, CVE-2016-1047, CVE-2016-1048, CVE-2016-1049, CVE-2016-1050, CVE-2016-1051, CVE-2016-1052, CVE-2016-1053, CVE-2016-1054, CVE-2016-1055, CVE-2016-1056, CVE-2016-1057, CVE-2016-1058, CVE-2016-1059, CVE-2016-1060, CVE-2016-1061, CVE-2016-1065, CVE-2016-1066, CVE-2016-1067, CVE-2016-1068, CVE-2016-1069, CVE-2016-1070, CVE-2016-1075, CVE-2016-1094, CVE-2016-1121, CVE-2016-1122, and CVE-2016-4102.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, microsoft
Affected products: acrobat, acrobat_dc, acrobat_reader_dc, mac_os_x, reader, windows
CVE-2016-4108 (published 2016-05-11)
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, microsoft
Affected products: edge, flash_player, internet_explorer
CVE-2016-4109 (published 2016-05-11)
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, microsoft
Affected products: edge, flash_player, internet_explorer
CVE-2016-4110 (published 2016-05-11)
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, microsoft
Affected products: edge, flash_player, internet_explorer
CVE-2016-4111 (published 2016-05-11)
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, microsoft
Affected products: edge, flash_player, internet_explorer
CVE-2016-4112 (published 2016-05-11)
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, microsoft
Affected products: edge, flash_player, internet_explorer
CVE-2016-4113 (published 2016-05-11)
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, microsoft
Affected products: edge, flash_player, internet_explorer
CVE-2016-4114 (published 2016-05-11)
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, microsoft
Affected products: edge, flash_player, internet_explorer
CVE-2016-4115 (published 2016-05-11)
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, microsoft
Affected products: edge, flash_player, internet_explorer
CVE-2016-4116 (published 2016-05-11)
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, microsoft
Affected products: edge, flash_player, internet_explorer
CVE-2016-4117 (published 2016-05-11)
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: adobe, opensuse, redhat, suse
Affected products: enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_server_from_rhui, enterprise_linux_workstation, evergreen, flash_player, linux_enterprise_desktop, linux_enterprise_workstation_extension, opensuse
Added to CISA KEV catalog: 2022-03-03
KEV required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2016-4118 (published 2016-05-30)
Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-264
Affected vendors: adobe, microsoft
Affected products: connect, windows
CVE-2016-4119 (published 2016-08-26)
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063, CVE-2016-1064, CVE-2016-1071, CVE-2016-1072, CVE-2016-1073, CVE-2016-1074, CVE-2016-1076, CVE-2016-1077, CVE-2016-1078, CVE-2016-1080, CVE-2016-1081, CVE-2016-1082, CVE-2016-1083, CVE-2016-1084, CVE-2016-1085, CVE-2016-1086, CVE-2016-1088, CVE-2016-1093, CVE-2016-1095, CVE-2016-1116, CVE-2016-1118, CVE-2016-1119, CVE-2016-1120, CVE-2016-1123, CVE-2016-1124, CVE-2016-1125, CVE-2016-1126, CVE-2016-1127, CVE-2016-1128, CVE-2016-1129, CVE-2016-1130, CVE-2016-4088, CVE-2016-4089, CVE-2016-4090, CVE-2016-4093, CVE-2016-4094, CVE-2016-4096, CVE-2016-4097, CVE-2016-4098, CVE-2016-4099, CVE-2016-4100, CVE-2016-4101, CVE-2016-4103, CVE-2016-4104, and CVE-2016-4105.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: adobe, apple, microsoft
Affected products: acrobat, acrobat_dc, acrobat_reader_dc, mac_os_x, reader, windows
CVE-2016-4120 (published 2016-06-16)
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1096, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1102, CVE-2016-1104, CVE-2016-4109, CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114, CVE-2016-4115, CVE-2016-4160, CVE-2016-4161, CVE-2016-4162, and CVE-2016-4163.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: adobe, apple, google, linux, microsoft
Affected products: air_desktop_runtime, air_sdk, air_sdk_\&_compiler, android, chrome_os, flash_player, flash_player_desktop_runtime, iphone_os, linux_kernel, mac_os_x, windows, windows_10, windows_8.1
CVE-2016-4121 (published 2016-06-16)
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1097, CVE-2016-1106, CVE-2016-1107, CVE-2016-1108, CVE-2016-1109, CVE-2016-1110, CVE-2016-4108, and CVE-2016-4110.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: adobe, apple, google, linux, microsoft
Affected products: air_desktop_runtime, air_sdk, air_sdk_\&_compiler, android, chrome_os, flash_player, flash_player_desktop_runtime, iphone_os, linux_kernel, mac_os_x, windows, windows_10, windows_8.1
CVE-2016-4122 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4123 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4124 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4125 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4126 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, microsoft
Affected products: air_desktop_runtime, windows
CVE-2016-4127 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4128 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4129 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4130 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4131 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4132 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4133 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4134 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4135 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4136 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4137 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4138 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4139 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4140 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4141 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4142 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4143 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4144 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4145 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4146 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4147 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4148 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4149 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-843
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4150 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4151 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4152 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4153 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4154 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4155 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, opensuse, windows, windows_10, windows_8.1
CVE-2016-4156 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, flash_player_desktop_runtime, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, macos, opensuse, windows, windows_10, windows_8.1, windows_rt_8.1, windows_server_2012
CVE-2016-4157 (published 2016-06-16)
Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-264
Affected vendors: adobe
Affected products: creative_cloud
CVE-2016-4158 (published 2016-06-16)
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-264
Affected vendors: adobe, microsoft
Affected products: creative_cloud, windows
CVE-2016-4159 (published 2016-06-16)
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: adobe
Affected products: coldfusion
CVE-2016-4160 (published 2016-06-16)
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1096, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1102, CVE-2016-1104, CVE-2016-4109, CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114, CVE-2016-4115, CVE-2016-4120, CVE-2016-4161, CVE-2016-4162, and CVE-2016-4163.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: adobe, apple, google, linux, microsoft
Affected products: air_desktop_runtime, air_sdk, air_sdk_\&_compiler, android, chrome_os, flash_player, flash_player_desktop_runtime, iphone_os, linux_kernel, mac_os_x, windows, windows_10, windows_8.1
CVE-2016-4161 (published 2016-06-16)
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1096, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1102, CVE-2016-1104, CVE-2016-4109, CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114, CVE-2016-4115, CVE-2016-4120, CVE-2016-4160, CVE-2016-4162, and CVE-2016-4163.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: adobe, apple, google, linux, microsoft
Affected products: air_desktop_runtime, air_sdk, air_sdk_\&_compiler, android, chrome_os, flash_player, flash_player_desktop_runtime, iphone_os, linux_kernel, mac_os_x, windows, windows_10, windows_8.1
CVE-2016-4162 (published 2016-06-16)
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1096, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1102, CVE-2016-1104, CVE-2016-4109, CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114, CVE-2016-4115, CVE-2016-4120, CVE-2016-4160, CVE-2016-4161, and CVE-2016-4163.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: adobe, apple, google, linux, microsoft
Affected products: air_desktop_runtime, air_sdk, air_sdk_\&_compiler, android, chrome_os, flash_player, flash_player_desktop_runtime, iphone_os, linux_kernel, mac_os_x, windows, windows_10, windows_8.1
CVE-2016-4163 (published 2016-06-16)
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1096, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1102, CVE-2016-1104, CVE-2016-4109, CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114, CVE-2016-4115, CVE-2016-4120, CVE-2016-4160, CVE-2016-4161, and CVE-2016-4162.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: adobe, apple, google, linux, microsoft
Affected products: air_desktop_runtime, air_sdk, air_sdk_\&_compiler, android, chrome_os, flash_player, flash_player_desktop_runtime, iphone_os, linux_kernel, mac_os_x, windows, windows_10, windows_8.1
CVE-2016-4164 (published 2016-06-16)
Cross-site scripting (XSS) vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: adobe
Affected products: brackets
CVE-2016-4165 (published 2016-06-16)
The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: adobe
Affected products: brackets
CVE-2016-4166 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft
Affected products: chrome_os, flash_player, flash_player_desktop_runtime, linux_kernel, mac_os_x, windows, windows_10, windows_8.1
CVE-2016-4167 (published 2016-06-16)
Adobe DNG Software Development Kit (SDK) before 1.4 2016 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: adobe
Affected products: dng_software_development_kit
CVE-2016-4168 (published 2016-08-09)
Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: adobe
Affected products: experience_manager
CVE-2016-4169 (published 2016-08-09)
Adobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event information via unspecified vectors.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: adobe
Affected products: experience_manager
CVE-2016-4170 (published 2016-08-09)
Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: adobe
Affected products: experience_manager
CVE-2016-4171 (published 2016-06-16)
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: adobe, apple, google, linux, microsoft, opensuse, redhat, suse
Affected products: chrome_os, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_workstation, flash_player, linux_enterprise_desktop, linux_enterprise_workstation_extension, linux_kernel, mac_os_x, macos, opensuse, windows, windows_10, windows_8.1
Added to CISA KEV catalog: 2022-03-25
KEV required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2016-4172 (published 2016-07-13)
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adobe, apple, google, linux, microsoft
Affected products: chrome_os, flash_player, flash_player_desktop_runtime, linux_kernel, mac_os_x, windows, windows_10, windows_8.1
CVE-2016-4173 (published 2016-07-13)
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: adobe, apple, google, linux, microsoft
Affected products: chrome_os, flash_player, flash_player_desktop_runtime, linux_kernel, mac_os_x, windows, windows_10, windows_8.1