CVE-2016-1014: High severity macromedia flash player vulnerability
Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in an unspecified directory.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1014?
CVE-2016-1014 is rated as a high-severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2016-1014?
To fix CVE-2016-1014, update Adobe Flash Player to versions 18.0.0.344 or later, or 21.0.0.214 or later.
Who is affected by CVE-2016-1014?
CVE-2016-1014 affects users of Adobe Flash Player versions prior to 18.0.0.344 and between 19.0.0.0 and 21.0.0.214 on Windows and OS X, and before 11.2.202.616 on Linux.
What is an untrusted search path vulnerability in CVE-2016-1014?
An untrusted search path vulnerability allows malicious users to manipulate application resource loading to execute arbitrary code in a privileged context.
What are the consequences of exploiting CVE-2016-1014?
Exploiting CVE-2016-1014 can lead to privilege escalation, where an attacker gains unauthorized access to system resources.