CRITICAL🚩 CISA KEV⚡ EXPLOIT🇵🇱 Wersja polska

CVE-2016-4171

CVSS 9.8v3.1pub. 2016-06-16upd. 2026-04-21

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Adobe Flash Player

    APP
    Adobe
    ≤ 11.2.202.621≤ 21.0.0.242≤ 18.0.0.352

  • Apple macOS

    OS
    Apple
    all versions

  • Apple Mac Os X

    OS
    Apple
    all versions

  • Google Chrome Os

    OS
    Google
    all versions

  • Linux Kernel

    OS
    Linux
    all versions

  • Microsoft Windows

    OS
    Microsoft
    all versions

  • Microsoft Windows 10

    OS
    Microsoft
    all versions

  • Microsoft Windows 8.1

    OS
    Microsoft
    all versions

  • Opensuse

    OS
    Opensuse
    13.113.2

  • Red Hat Enterprise Linux Desktop

    OS
    Redhat
    5.06.0

  • Red Hat Enterprise Linux Server

    OS
    Redhat
    5.06.0

  • Red Hat Enterprise Linux Workstation

    OS
    Redhat
    5.06.0

  • SUSE Linux Enterprise Desktop

    OS
    Suse
    12

  • SUSE Linux Enterprise Workstation Extension

    OS
    Suse
    12

CISA KEV — detailsi

Vendori
Adobe ↗
Producti
Flash Player
Added to KEVi
March 25, 2022
Remediation deadline (US Federal)i
April 15, 2022(overdue)
Required action (CISA)i

The impacted product is end-of-life and should be disconnected if still in use.

CISA descriptioni

Unspecified vulnerability in Adobe Flash Player allows for remote code execution.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 15 kwietnia 2022
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2026-65400CRITICAL9.8⚠ KEVPL ✓same product

Pominięcie uwierzytelniania w Screen Sharing na macOS

CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓same product

Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-43300CRITICAL10.0⚠ KEVPL ✓same product

Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)