CVE-2016-7020: Use After Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7020?
CVE-2016-7020 is classified as a critical vulnerability that allows attackers to execute arbitrary code.
How do I fix CVE-2016-7020?
To mitigate CVE-2016-7020, ensure that Adobe Flash Player is updated to the latest version, specifically above 22.0.0.209.
What platforms are affected by CVE-2016-7020?
CVE-2016-7020 impacts Adobe Flash Player on Windows and macOS, specifically older versions before 18.0.0.366 and 19.x through 22.x before 22.0.0.209.
Can CVE-2016-7020 be exploited remotely?
Yes, CVE-2016-7020 can potentially be exploited remotely, allowing attackers to execute malicious code on targeted systems.
Is there a workaround for CVE-2016-7020?
Disabling or uninstalling Adobe Flash Player can serve as a temporary workaround for CVE-2016-7020 until a patch is applied.