CVE-2016-1019

Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score72.7900%

EPSS Percentile94.02th

PublishedApr 7, 2016

Last ModifiedApr 21, 2026

Vulnerability Description

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.

<= 21.0.0.176

References & Advisories

🔗 http://blogs.adobe.com/psirt/?p=1330

🔗 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html

🔗 http://rhn.redhat.com/errata/RHSA-2016-0610.html

Vulnerability Description

Affected Platforms (CPE)

Flash Player Desktop Runtime

Flash Player

Flash Player

Flash Player

Flash Player

Flash Player

Air Desktop Runtime

Air Sdk

Air Sdk \& Compiler

References & Advisories

Related Vulnerabilities