Microsoft security advisory

ADV160001

April 2016 Adobe Flash Security Update

Related records (10)

TI-2016-00925 CVE-2016-1019 · GHSA-mj28-pj3c-6jwr

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of…

CRITICAL 100KEV

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22316 Published 2016-04-07 Fixed

TI-2016-00917 CVE-2016-1011 · GHSA-6j5q-5p93-ghjx

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through…

MEDIUM 59

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24882 Published 2016-04-09 Fixed CWE-416

TI-2016-00919 CVE-2016-1013 · GHSA-vh5c-rcpj-3744

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through…

MEDIUM 58

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.21792 Published 2016-04-09 Fixed CWE-416

TI-2016-00924 CVE-2016-1018 · GHSA-fq6f-9mhj-9mhq

Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x…

MEDIUM 49

Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via crafted JPEG…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08292 Published 2016-04-09 Fixed CWE-787

TI-2016-00921 CVE-2016-1015 · GHSA-qxr5-2c92-fj86

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows…

MEDIUM 48

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties t…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07133 Published 2016-04-09 Fixed CWE-843

TI-2016-00923 CVE-2016-1017 · GHSA-4wrp-m389-3rjm

Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before…

MEDIUM 47

Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execut…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06102 Published 2016-04-09 Fixed CWE-416

TI-2016-00922 CVE-2016-1016 · GHSA-7v4g-vc2q-829q

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player…

MEDIUM 47

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06102 Published 2016-04-09 Fixed CWE-416

TI-2016-00918 CVE-2016-1012 · GHSA-4vhf-85cp-q8xf

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03783 Published 2016-04-09 Fixed CWE-787

TI-2016-00912 CVE-2016-1006 · GHSA-5766-chm9-r2pw

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows…

MEDIUM 42

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.03906 Published 2016-04-09 Fixed

TI-2016-00920 CVE-2016-1014 · GHSA-fjcq-4c82-3m9g

Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x…

LOW 34

Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.01205 Published 2016-04-09 Fixed CWE-426