CVE-2016-7864: Use After Free
Published Nov 8, 2016
·Updated
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
23 affected components
Adobe Flash Player<=23.0.0.205
Apple iOS and macOS
Microsoft Windows
Adobe Flash Player Edge<=23.0.0.205
Adobe Flash Player Internet Explorer<=23.0.0.205
Microsoft Windows 10
Microsoft Windows 10=1511
Microsoft Windows 10=1607
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Adobe Flash Player for Linux<=11.2.202.643
Linux Linux kernel
Adobe Flash Player Chrome<=23.0.0.205
Google Chrome OS
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
Remediation
Event History
Nov 8, 2016
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-7864?
CVE-2016-7864 has a critical severity rating due to the potential for arbitrary code execution.
2
How do I fix CVE-2016-7864?
To fix CVE-2016-7864, update Adobe Flash Player to version 23.0.0.206 or later.
3
Which versions of Adobe Flash Player are affected by CVE-2016-7864?
CVE-2016-7864 affects Adobe Flash Player versions 23.0.0.205 and earlier, and 11.2.202.643 and earlier.
4
What types of vulnerabilities are associated with CVE-2016-7864?
CVE-2016-7864 is associated with a use-after-free vulnerability that can be exploited for arbitrary code execution.
5
Can CVE-2016-7864 affect Mac systems?
CVE-2016-7864 does not directly affect macOS systems if they have Adobe Flash Player updated to the latest version.