ADV160005: September 2016 Adobe Flash Security Update

TI-2016-03664 CVE-2016-4275 · GHSA-x83x-pfj2-3j2c

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 56

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.19443 Published 2016-09-14 Fixed CWE-787

TI-2016-05952 CVE-2016-6931 · GHSA-wm2x-wp62-hmvx

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 48

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07383 Published 2016-09-14 Fixed CWE-416

TI-2016-03676 CVE-2016-4287 · GHSA-v3x4-9vpx-6mp3

Integer overflow in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before…

MEDIUM 48

Integer overflow in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07253 Published 2016-09-14 Fixed CWE-190

TI-2016-05953 CVE-2016-6932 · GHSA-cf89-r95f-3mf7

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-09-14 Fixed CWE-416

TI-2016-05951 CVE-2016-6930 · GHSA-78vq-jgwv-cvc9

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-09-14 Fixed CWE-416

TI-2016-05950 CVE-2016-6929 · GHSA-5m4j-2j6w-hff8

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-09-14 Fixed CWE-416

TI-2016-05949 CVE-2016-6927 · GHSA-993m-7mxh-9wwg

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-09-14 Fixed CWE-416

TI-2016-05948 CVE-2016-6926 · GHSA-f2p7-69mv-9qwj

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-09-14 Fixed CWE-416

TI-2016-05947 CVE-2016-6925 · GHSA-rchg-vwch-wr7v

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-09-14 Fixed CWE-416

TI-2016-05945 CVE-2016-6923 · GHSA-j4c2-vwxj-6m2j

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-09-14 Fixed CWE-416

TI-2016-05943 CVE-2016-6921 · GHSA-mhfp-6mc3-v4q5

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-09-14 Fixed CWE-416

TI-2016-03668 CVE-2016-4279 · GHSA-p93p-w9hc-x6fh

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-09-14 Fixed CWE-416

TI-2016-03661 CVE-2016-4272 · GHSA-87cp-v4gr-v7cg

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through…

MEDIUM 47

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0604 Published 2016-09-14 Fixed CWE-416

TI-2016-05946 CVE-2016-6924 · GHSA-pp4w-2qx8-3688

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04434 Published 2016-09-14 Fixed CWE-787

TI-2016-05944 CVE-2016-6922 · GHSA-q6gm-g9f4-xjp2

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04434 Published 2016-09-14 Fixed CWE-787

TI-2016-03674 CVE-2016-4285 · GHSA-gc99-65fq-c7qg

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04434 Published 2016-09-14 Fixed CWE-787

TI-2016-03673 CVE-2016-4284 · GHSA-f3g6-2mj4-84wh

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04434 Published 2016-09-14 Fixed CWE-787

TI-2016-03672 CVE-2016-4283 · GHSA-555j-hgj6-5rmx

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04434 Published 2016-09-14 Fixed CWE-787

TI-2016-03671 CVE-2016-4282 · GHSA-5pw6-m67v-48cv

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04434 Published 2016-09-14 Fixed CWE-787

TI-2016-03670 CVE-2016-4281 · GHSA-h84j-3crf-6xm2

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04434 Published 2016-09-14 Fixed CWE-787

TI-2016-03669 CVE-2016-4280 · GHSA-p3qw-4fr9-22cj

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04434 Published 2016-09-14 Fixed CWE-787

TI-2016-03665 CVE-2016-4276 · GHSA-wm9g-vf38-6xr5

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04434 Published 2016-09-14 Fixed CWE-787

TI-2016-03663 CVE-2016-4274 · GHSA-jqjc-23q2-72qc

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

MEDIUM 45

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04434 Published 2016-09-14 Fixed CWE-787

TI-2016-03667 CVE-2016-4278 · GHSA-qm43-94fx-66hr

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

LOW 36

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information v…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.04057 Published 2016-09-14 Fixed

TI-2016-03666 CVE-2016-4277 · GHSA-fxh4-hffp-6942

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

LOW 36

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information v…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.042 Published 2016-09-14 Fixed

TI-2016-03660 CVE-2016-4271 · GHSA-rhff-rv46-hwr9

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows…

LOW 36

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information v…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.04555 Published 2016-09-14 Fixed

ADV160005

Related records (26)