CVE-2016-7860: Incorrect Type Cast
Published Nov 8, 2016
·Updated
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
23 affected components
Adobe Flash Player<=23.0.0.205
Apple iOS and macOS
Microsoft Windows
Adobe Flash Player Edge<=23.0.0.205
Adobe Flash Player Internet Explorer<=23.0.0.205
Microsoft Windows 10
Microsoft Windows 10=1511
Microsoft Windows 10=1607
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Adobe Flash Player Chrome<=23.0.0.205
Google Chrome OS
Linux Linux kernel
Adobe Flash Player for Linux<=11.2.202.643
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
Remediation
Event History
Nov 8, 2016
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-7860?
CVE-2016-7860 has a high severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2016-7860?
To fix CVE-2016-7860, update Adobe Flash Player to the latest version beyond 23.0.0.205.
3
What versions of Adobe Flash Player are affected by CVE-2016-7860?
CVE-2016-7860 affects Adobe Flash Player versions 23.0.0.205 and earlier, as well as 11.2.202.643 and earlier.
4
What could happen if CVE-2016-7860 is exploited?
Exploitation of CVE-2016-7860 could lead to arbitrary code execution, allowing attackers to take control of affected systems.
5
Is there a workaround for CVE-2016-7860?
Currently, the best workaround for CVE-2016-7860 is to disable or uninstall Adobe Flash Player until a fix can be applied.