ADV160004: July 2016 Adobe Flash Security Update

TI-2016-03620 CVE-2016-4231 · GHSA-mg8v-vhhq-2xh8

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through…

MEDIUM 63

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.32891 Published 2016-07-13 Fixed CWE-416

TI-2016-03618 CVE-2016-4229 · GHSA-rqf6-rqc3-qh52

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through…

MEDIUM 63

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.32465 Published 2016-07-13 Fixed CWE-416

TI-2016-03617 CVE-2016-4228 · GHSA-mwjc-97rr-5v3c

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through…

MEDIUM 63

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.33134 Published 2016-07-13 Fixed CWE-416

TI-2016-03616 CVE-2016-4227 · GHSA-x89x-8gr3-3g6f

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through…

MEDIUM 63

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.32891 Published 2016-07-13 Fixed CWE-416

TI-2016-03615 CVE-2016-4226 · GHSA-vv28-2m75-rgxc

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through…

MEDIUM 63

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.33134 Published 2016-07-13 Fixed CWE-416

TI-2016-03619 CVE-2016-4230 · GHSA-fp9v-m345-2g2c

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through…

MEDIUM 62

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.32226 Published 2016-07-13 Fixed CWE-416

TI-2016-03621 CVE-2016-4232 · GHSA-x778-7c29-54fg

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 59

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information from process memory via unspecified vecto…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.36456 Published 2016-07-13 Fixed CWE-401

TI-2016-03568 CVE-2016-4179 · GHSA-8qq4-g237-59gp

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 57

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.20475 Published 2016-07-13 Fixed CWE-787

TI-2016-03564 CVE-2016-4175 · GHSA-48mm-3p2m-g475

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 57

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.20475 Published 2016-07-13 Fixed CWE-787

TI-2016-03566 CVE-2016-4177 · GHSA-cxh4-rfq4-vxw5

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 55

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corr…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17585 Published 2016-07-13 Fixed CWE-787

TI-2016-03565 CVE-2016-4176 · GHSA-x38q-2r3f-f9wm

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 55

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corr…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17585 Published 2016-07-13 Fixed CWE-787

TI-2016-03611 CVE-2016-4222 · GHSA-gjm7-ffwr-v8q5

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through…

MEDIUM 49

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0854 Published 2016-07-13 Fixed CWE-416

TI-2016-03638 CVE-2016-4249 · GHSA-wj44-vm9q-56xc

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x…

MEDIUM 48

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified v…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07126 Published 2016-07-13 Fixed CWE-787

TI-2016-03637 CVE-2016-4248 · GHSA-j472-wx29-mgh6

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through…

MEDIUM 48

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07297 Published 2016-07-13 Fixed CWE-416

TI-2016-03614 CVE-2016-4225 · GHSA-gh5f-292c-j673

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 48

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion,"…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07391 Published 2016-07-13 Fixed CWE-843

TI-2016-03613 CVE-2016-4224 · GHSA-97cg-4h65-jxxg

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 48

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion,"…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07391 Published 2016-07-13 Fixed CWE-843

TI-2016-03612 CVE-2016-4223 · GHSA-947c-r27r-9gpv

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 48

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion,"…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07391 Published 2016-07-13 Fixed CWE-843

TI-2016-03563 CVE-2016-4174 · GHSA-g65w-429f-2gr6

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-07-13 Fixed CWE-416

TI-2016-03562 CVE-2016-4173 · GHSA-wmxh-9c3j-m3vm

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-07-13 Fixed CWE-416

TI-2016-03577 CVE-2016-4188 · GHSA-w894-7wf4-7w3j

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0536 Published 2016-07-13 Fixed CWE-787

TI-2016-03571 CVE-2016-4182 · GHSA-p9mf-3259-ph3m

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05431 Published 2016-07-13 Fixed CWE-787

TI-2016-03574 CVE-2016-4185 · GHSA-28m3-8469-832v

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04493 Published 2016-07-13 Fixed CWE-787

TI-2016-03636 CVE-2016-4247 · GHSA-f3h9-555p-x843

Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before…

LOW 30

Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors…

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.03205 Published 2016-07-13 Fixed CWE-362

TI-2016-03567 CVE-2016-4178 · GHSA-32fr-79cm-96p3

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows…

LOW 26

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information v…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.03462 Published 2016-07-13 Fixed CWE-863

ADV160004

Related records (24)