CVE-2017-0682 | ByteOS Network

Vulnerability Details :

CVE-2017-0682

Assigner-google_android

Assigner Org ID-baff130e-b8d5-4e15-b3d3-c3cf5d5545c6

Published At-06 Jul, 2017 | 20:00

Updated At-16 Sep, 2024 | 18:33

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:google_android

Assigner Org ID:baff130e-b8d5-4e15-b3d3-c3cf5d5545c6

Published At:06 Jul, 2017 | 20:00

Updated At:16 Sep, 2024 | 18:33

▼CVE Numbering Authority (CNA)

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422.

Affected Products

Vendor

Product

Versions

Affected

Android-7.0 Android-7.1.1 Android-7.1.2

Problem Types

Type	CWE ID	Description
text	N/A	Remote code execution

Type: text

CWE ID: N/A

Description: Remote code execution

References

Hyperlink	Resource
https://source.android.com/security/bulletin/2017-07-01	x_refsource_CONFIRM
http://www.securityfocus.com/bid/99478	vdb-entry x_refsource_BID

Hyperlink: https://source.android.com/security/bulletin/2017-07-01

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/99478

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://source.android.com/security/bulletin/2017-07-01	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/99478	vdb-entry x_refsource_BID x_transferred

Hyperlink: https://source.android.com/security/bulletin/2017-07-01

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/99478

Resource:

vdb-entry

x_refsource_BID

x_transferred

▼National Vulnerability Database (NVD)

Source:security@android.com

Published At:06 Jul, 2017 | 20:29

Updated At:13 May, 2026 | 00:24

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

>>android>>7.0

cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*

>>android>>7.1.1

cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*

>>android>>7.1.2

cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/99478	security@android.com	Third Party Advisory VDB Entry
https://source.android.com/security/bulletin/2017-07-01	security@android.com	Patch Vendor Advisory
http://www.securityfocus.com/bid/99478	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://source.android.com/security/bulletin/2017-07-01	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/99478

Source: security@android.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://source.android.com/security/bulletin/2017-07-01

Source: security@android.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/99478

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://source.android.com/security/bulletin/2017-07-01

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Similar CVEs

1237Records found

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.42% / 62.36%

||

7 Day CHG~0.00%

Published-25 Nov, 2016 | 16:00

Updated-06 May, 2026 | 22:30

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses libjpeg. Android ID: A-30259087.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-11.16% / 93.57%

||

7 Day CHG~0.00%

Published-08 Nov, 2016 | 17:45

Updated-06 May, 2026 | 22:30

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-windows_10 flash_player_for_linux windows_8.1 mac_os_x chrome_os enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows flash_player windows_server_2016 linux_kernel windows_rt_8.1 windows_server_2012 Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.40%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, and CVE-2016-6922.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 windows_8.1 mac_os_x windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.14% / 33.82%

||

7 Day CHG~0.00%

Published-12 Jan, 2017 | 15:00

Updated-06 May, 2026 | 22:30

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-29617572. References: QC-CR#1055783.

Vendor-Google LLC Linux Kernel Organization, Inc

Product-linux_kernel Android

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.07% / 20.16%

||

7 Day CHG~0.00%

Published-25 Nov, 2016 | 16:00

Updated-06 May, 2026 | 22:30

An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30970485.

Vendor-Google LLC

Product-android Android

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7||HIGH

EPSS-0.03% / 10.64%

||

7 Day CHG~0.00%

Published-12 Jan, 2017 | 15:00

Updated-06 May, 2026 | 22:30

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31350755. References: MT-ALPS02961424.

Vendor-n/a Google LLC

Product-android Android Android-N/A

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.65% / 85.93%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, and CVE-2016-6932.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7||HIGH

EPSS-0.14% / 33.82%

||

7 Day CHG~0.00%

Published-12 Jan, 2017 | 15:00

Updated-06 May, 2026 | 22:30

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31224389. References: MT-ALPS02943506.

Vendor-Google LLC Linux Kernel Organization, Inc

Product-linux_kernel Android

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.50% / 87.74%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.07% / 20.16%

||

7 Day CHG~0.00%

Published-25 Nov, 2016 | 16:00

Updated-06 May, 2026 | 22:30

An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30559423. References: Qualcomm QC-CR#1060554.

Vendor-Google LLC

Product-android Android

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.14% / 33.82%

||

7 Day CHG~0.00%

Published-12 Jan, 2017 | 15:00

Updated-06 May, 2026 | 22:30

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-29421682. References: QC-CR#1055792.

Vendor-Google LLC Linux Kernel Organization, Inc

Product-linux_kernel Android

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-11.16% / 93.57%

||

7 Day CHG~0.00%

Published-08 Nov, 2016 | 17:45

Updated-06 May, 2026 | 22:30

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-windows_10 flash_player_for_linux mac_os_x windows_8.1 chrome_os enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows flash_player windows_server_2016 linux_kernel windows_rt_8.1 windows_server_2012 Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-5.09% / 89.90%

||

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-06 May, 2026 | 22:30

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy functionality method. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 13.26%

||

7 Day CHG~0.00%

Published-10 Oct, 2016 | 10:00

Updated-06 May, 2026 | 22:30

The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 30537088.

Vendor-n/a Google LLC

Product-android n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.43%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-5.94% / 90.73%

||

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-06 May, 2026 | 22:30

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action Message Format serialization (AFM0). Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.15% / 34.80%

||

7 Day CHG~0.00%

Published-12 Jan, 2017 | 15:00

Updated-06 May, 2026 | 22:30

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31680980. References: N-CVE-2016-6776.

Vendor-Google LLC Linux Kernel Organization, Inc

Product-linux_kernel Android

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.35%

||

7 Day CHG~0.00%

Published-16 Aug, 2017 | 15:00

Updated-13 May, 2026 | 00:24

In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound may result in an out of bounds memory access.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.93%

||

7 Day CHG~0.00%

Published-16 Aug, 2017 | 15:00

Updated-13 May, 2026 | 00:24

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.85%

||

7 Day CHG~0.00%

Published-20 Mar, 2017 | 16:00

Updated-13 May, 2026 | 00:24

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR#1094140.

Vendor-n/a Google LLC

Product-android n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.53% / 67.47%

||

7 Day CHG~0.00%

Published-23 May, 2016 | 19:00

Updated-06 May, 2026 | 22:30

Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack."

Vendor-n/a Google LLC Lenovo Group Limited

Product-android shareit n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.40%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.56%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_workstation enterprise_linux_server windows flash_player windows_rt_8.1 opensuse n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.14%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-windows_10 linux_enterprise_desktop mac_os_x enterprise_linux_workstation enterprise_linux_server windows_8.1 linux_enterprise_workstation_extension enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os opensuse n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.40%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.07% / 21.44%

||

7 Day CHG~0.00%

Published-11 Sep, 2016 | 21:00

Updated-06 May, 2026 | 22:30

The NVIDIA kernel in Android before 2016-09-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 29518457.

Vendor-n/a Google LLC

Product-android n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.14%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-windows_10 linux_enterprise_desktop mac_os_x enterprise_linux_workstation enterprise_linux_server windows_8.1 linux_enterprise_workstation_extension enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os opensuse n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 13.26%

||

7 Day CHG~0.00%

Published-11 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28026625.

Vendor-n/a Google LLC

Product-android n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-5.66% / 90.46%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-windows_10 linux_enterprise_desktop mac_os_x enterprise_linux_workstation enterprise_linux_server windows_8.1 linux_enterprise_workstation_extension enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os opensuse n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.40%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.07% / 20.71%

||

7 Day CHG~0.00%

Published-11 Sep, 2016 | 21:00

Updated-06 May, 2026 | 22:30

Buffer overflow in codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to gain privileges via a crafted application, aka internal bug 29421675.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.24% / 47.30%

||

7 Day CHG~0.00%

Published-11 Sep, 2016 | 21:00

Updated-06 May, 2026 | 22:30

media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 does not properly interact with the use of static variables in libjhead_jni, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 29270469.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.40%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 13.19%

||

7 Day CHG~0.00%

Published-10 Oct, 2016 | 10:00

Updated-06 May, 2026 | 22:30

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and MediaTek internal bug ALPS02829568.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-6.89% / 91.48%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.43%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.40%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.48% / 65.46%

||

7 Day CHG~0.00%

Published-11 Sep, 2016 | 21:00

Updated-06 May, 2026 | 22:30

The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28919863 and Qualcomm internal bug CR1037897.

Vendor-n/a Google LLC

Product-android n/a

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.50%

||

7 Day CHG~0.00%

Published-10 Oct, 2016 | 10:00

Updated-06 May, 2026 | 22:30

drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29157595 and Qualcomm internal bug CR 1036418.

Vendor-n/a Google LLC

Product-android n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.40%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.74%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-65.39% / 98.50%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4231, and CVE-2016-4248.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.40%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-5.20% / 90.02%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.56%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_workstation enterprise_linux_server windows flash_player windows_rt_8.1 opensuse n/a

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.55%

||

7 Day CHG~0.00%

Published-11 Sep, 2016 | 21:00

Updated-06 May, 2026 | 22:30

omx/SimpleSoftOMXComponent.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not prevent input-port changes, which allows attackers to gain privileges via a crafted application, aka internal bug 29421804.

Vendor-n/a Google LLC

Product-android n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.56%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_workstation enterprise_linux_server windows flash_player windows_rt_8.1 opensuse n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.56%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_workstation enterprise_linux_server windows flash_player windows_rt_8.1 opensuse n/a

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.04% / 13.26%

||

7 Day CHG~0.00%

Published-11 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28085222 and MediaTek internal bug ALPS02677244.

Vendor-n/a Google LLC

Product-android n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.56%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_workstation enterprise_linux_server windows flash_player windows_rt_8.1 opensuse n/a