CVE-2016-7863: Use After Free
Published Nov 8, 2016
·Updated
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
22 affected components
Adobe Flash Player<=23.0.0.205
Apple iOS and macOS
Microsoft Windows
Adobe Flash Player Chrome<=23.0.0.205
Google Chrome OS
Linux Linux kernel
Adobe Flash Player for Linux<=11.2.202.643
Adobe Flash Player Edge<=23.0.0.205
Adobe Flash Player Internet Explorer<=23.0.0.205
Microsoft Windows 10
Microsoft Windows 10=1511
Microsoft Windows 10=1607
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
Remediation
Event History
Nov 8, 2016
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-7863?
CVE-2016-7863 is considered a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2016-7863?
To fix CVE-2016-7863, update Adobe Flash Player to version 23.0.0.205 or later for all affected platforms.
3
What versions are affected by CVE-2016-7863?
Adobe Flash Player versions 23.0.0.205 and earlier, and 11.2.202.643 and earlier are affected by CVE-2016-7863.
4
What type of vulnerability is CVE-2016-7863?
CVE-2016-7863 is a use-after-free vulnerability that can be exploited for arbitrary code execution.
5
What impact does CVE-2016-7863 have if exploited?
Exploitation of CVE-2016-7863 can lead to unauthorized code execution on the affected device.