CVE-2016-0985: Critical severity macromedia flash player vulnerability
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0985?
CVE-2016-0985 is classified as a critical vulnerability that allows attackers to execute arbitrary code.
How do I fix CVE-2016-0985?
To resolve CVE-2016-0985, update Adobe Flash Player to version 18.0.0.329 or later for affected versions.
Which versions are affected by CVE-2016-0985?
CVE-2016-0985 affects Adobe Flash Player versions prior to 18.0.0.329, 19.x, and 20.x before 20.0.0.306 on Windows and macOS, along with prior versions of Adobe AIR.
What are the potential impacts of CVE-2016-0985?
Exploitation of CVE-2016-0985 may lead to unauthorized access, data theft, or widespread system compromise.
Is there an official patch for CVE-2016-0985?
Yes, Adobe released patches for CVE-2016-0985 in their updates for Flash Player and AIR, which should be applied immediately.