CVE-2016-1000: Use After Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, and CVE-2016-0999.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1000?
CVE-2016-1000 is rated as a critical vulnerability allowing attackers to execute arbitrary code.
How do I fix CVE-2016-1000?
To fix CVE-2016-1000, update Adobe Flash Player to version 18.0.0.333 or later for Windows and OS X, and to version 11.2.202.577 or later for Linux.
Which versions of Adobe software are affected by CVE-2016-1000?
CVE-2016-1000 affects Adobe Flash Player versions before 18.0.0.333, Adobe AIR versions before 21.0.0.176, and their respective SDKs.
Can CVE-2016-1000 be exploited remotely?
Yes, attackers can exploit CVE-2016-1000 remotely, potentially leading to complete system compromise.
What platforms are impacted by CVE-2016-1000?
The impacted platforms include Adobe Flash Player on Windows, macOS, and Linux, as well as Adobe AIR across these same systems.