CVE-2016-7862: Use After Free
Published Nov 8, 2016
·Updated
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
23 affected components
Adobe Flash Player<=23.0.0.205
Apple iOS and macOS
Microsoft Windows
Adobe Flash Player for Linux<=11.2.202.643
Linux Linux kernel
Adobe Flash Player Chrome<=23.0.0.205
Google Chrome OS
Adobe Flash Player Edge<=23.0.0.205
Adobe Flash Player Internet Explorer<=23.0.0.205
Microsoft Windows 10
Microsoft Windows 10=1511
Microsoft Windows 10=1607
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
Remediation
Event History
Nov 8, 2016
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-7862?
CVE-2016-7862 has a critical severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2016-7862?
To fix CVE-2016-7862, update Adobe Flash Player to version 23.0.0.206 or later.
3
Which versions of Adobe Flash Player are affected by CVE-2016-7862?
CVE-2016-7862 affects Adobe Flash Player versions 23.0.0.205 and earlier, as well as 11.2.202.643 and earlier.
4
What type of vulnerability is CVE-2016-7862?
CVE-2016-7862 is a use-after-free vulnerability that can be exploited by attackers.
5
Can I still use Adobe Flash Player if I am on a vulnerable version related to CVE-2016-7862?
It is not safe to use Adobe Flash Player on vulnerable versions related to CVE-2016-7862 until an update has been applied.