First published: Thu Oct 13 2016(Updated: )
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6989, and CVE-2016-6990.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Macromedia Flash Player | <=23.0.0.162 | |
Apple iOS and macOS | ||
Chrome OS | ||
Linux Kernel | ||
Microsoft Windows Operating System | ||
Macromedia Flash Player | <=23.0.0.162 | |
Macromedia Flash Player | <=23.0.0.162 | |
Windows 10 | ||
Microsoft Windows | ||
Macromedia Flash Player | <=18.0.0.375 | |
Adobe Flash Player | <=23.0.0.162 | |
Macromedia Flash Player | <=11.2.202.635 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-6986 has a critical severity rating due to its potential to allow attackers to execute arbitrary code.
To fix CVE-2016-6986, update Adobe Flash Player to version 23.0.0.185 or later.
Adobe Flash Player versions prior to 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and macOS are vulnerable.
Yes, Linux users running Adobe Flash Player versions before 11.2.202.637 are also affected by CVE-2016-6986.
Exploiting CVE-2016-6986 can lead to arbitrary code execution or a denial of service due to memory corruption.