CVE-2021-36072 | ByteOS Network

Vulnerability Details :

CVE-2021-36072

Assigner-adobe

Assigner Org ID-078d4453-3bcd-4900-85e6-15281da43538

Published At-01 Sep, 2021 | 14:34

Updated At-23 Apr, 2025 | 19:30

Adobe Bridge SGI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:adobe

Assigner Org ID:078d4453-3bcd-4900-85e6-15281da43538

Published At:01 Sep, 2021 | 14:34

Updated At:23 Apr, 2025 | 19:30

▼CVE Numbering Authority (CNA)

Adobe Bridge SGI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Products

Vendor

Product

Versions

Affected

From unspecified through 11.1 (custom)
From unspecified through None (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-787	Out-of-bounds Write (CWE-787)

Type: CWE

CWE ID: CWE-787

Description: Out-of-bounds Write (CWE-787)

Metrics

Version	Base score	Base severity	Vector
3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://helpx.adobe.com/security/products/bridge/apsb21-69.html	x_refsource_MISC

Hyperlink: https://helpx.adobe.com/security/products/bridge/apsb21-69.html

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://helpx.adobe.com/security/products/bridge/apsb21-69.html	x_refsource_MISC x_transferred

Hyperlink: https://helpx.adobe.com/security/products/bridge/apsb21-69.html

Resource:

x_refsource_MISC

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

Source:psirt@adobe.com

Published At:01 Sep, 2021 | 15:15

Updated At:09 Sep, 2021 | 13:54

Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

>>bridge>>Versions up to 11.1(inclusive)

cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*

Microsoft Corporation

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	psirt@adobe.com

CWE ID: CWE-787

Type: Primary

Source: psirt@adobe.com

References

Hyperlink	Source	Resource
https://helpx.adobe.com/security/products/bridge/apsb21-69.html	psirt@adobe.com	Patch Vendor Advisory

Hyperlink: https://helpx.adobe.com/security/products/bridge/apsb21-69.html

Source: psirt@adobe.com

Resource:

Patch

Vendor Advisory

Similar CVEs

8647Records found

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-93.79% / 99.85%

||

7 Day CHG~0.00%

Published-10 Nov, 2010 | 01:00

Updated-22 Oct, 2025 | 01:15

Known KEV||Action Due Date - 2022-03-24||Apply updates per vendor instructions.

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."

Vendor-n/a Microsoft Corporation

Product-office open_xml_file_format_converter n/a Office

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-1.21% / 78.66%

||

7 Day CHG~0.00%

Published-19 Dec, 2019 | 19:44

Updated-04 Aug, 2024 | 21:17

Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-20.87% / 95.48%

||

7 Day CHG~0.00%

Published-26 Aug, 2019 | 17:54

Updated-04 Aug, 2024 | 21:02

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.14% / 33.81%

||

7 Day CHG-0.02%

Published-09 Oct, 2024 | 13:28

Updated-18 Oct, 2024 | 14:42

Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows macos substance_3d_stager Substance3D - Stager substance_3d_stager

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-5.09% / 89.57%

||

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetConnection class when handling the proxy types. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.21% / 43.57%

||

7 Day CHG~0.00%

Published-13 Sep, 2024 | 09:37

Updated-18 Sep, 2024 | 14:13

Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows photoshop macos Photoshop Desktop photoshop

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.21% / 43.57%

||

7 Day CHG~0.00%

Published-13 Sep, 2024 | 09:37

Updated-18 Sep, 2024 | 14:14

Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows photoshop macos Photoshop Desktop photoshop

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 86.96%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, and CVE-2016-6922.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Zero Day Initiative

Matching Score-10

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-0.40% / 60.21%

||

7 Day CHG~0.00%

Published-03 Jun, 2019 | 18:15

Updated-04 Aug, 2024 | 20:31

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of EZIX files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7638.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-windows foxit_studio_photo Studio Photo

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-15.68% / 94.54%

||

7 Day CHG~0.00%

Published-25 Feb, 2021 | 23:01

Updated-19 Nov, 2024 | 15:36

Windows Address Book Remote Code Execution Vulnerability

Windows Address Book Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.50% / 87.33%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.50% / 87.33%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.87%

||

7 Day CHG-0.02%

Published-09 Oct, 2024 | 13:28

Updated-18 Oct, 2024 | 14:42

Substance3D - Stager | Heap-based Buffer Overflow (CWE-122)

Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows macos substance_3d_stager Substance3D - Stager substance_3d_stager

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.14% / 33.81%

||

7 Day CHG-0.02%

Published-09 Oct, 2024 | 13:28

Updated-18 Oct, 2024 | 14:41

Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows macos substance_3d_stager Substance3D - Stager substance_3d_stager

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.50% / 87.33%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, and CVE-2016-6989.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.50% / 87.33%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-5.89% / 90.38%

||

7 Day CHG~0.00%

Published-25 Feb, 2021 | 23:01

Updated-03 Aug, 2024 | 19:21

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2019 windows_10 Windows 10 Version 2004 Windows 10 Version 1507 Windows 10 Version 1607 Windows Server version 2004 Windows Server 2019 (Server Core installation)Windows Server 2016 Windows 10 Version 1809 Windows Server 2016 (Server Core installation)Windows Server, version 1909 (Server Core installation)Windows Server 2019 Windows Server version 20H2 Windows 10 Version 1909 Windows 10 Version 20H2

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.14% / 33.81%

||

7 Day CHG-0.02%

Published-09 Oct, 2024 | 13:28

Updated-18 Oct, 2024 | 14:42

Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows macos substance_3d_stager Substance3D - Stager substance_3d_stager

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.3||HIGH

EPSS-92.18% / 99.70%

||

7 Day CHG~0.00%

Published-09 Sep, 2010 | 21:00

Updated-22 Oct, 2025 | 01:15

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

Vendor-n/a Microsoft Corporation Adobe Inc.Apple Inc.

Product-macos acrobat_reader windows acrobat n/a Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.14% / 33.81%

||

7 Day CHG-0.02%

Published-09 Oct, 2024 | 08:51

Updated-18 Oct, 2024 | 14:35

Dimension | Out-of-bounds Write (CWE-787)

Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows dimension macos Dimension dimension

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.87%

||

7 Day CHG-0.02%

Published-09 Oct, 2024 | 13:28

Updated-18 Oct, 2024 | 14:42

Substance3D - Stager | Heap-based Buffer Overflow (CWE-122)

Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows macos substance_3d_stager Substance3D - Stager substance_3d_stager

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.50% / 87.33%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-15.50% / 94.49%

||

7 Day CHG~0.00%

Published-25 Feb, 2021 | 23:01

Updated-03 Aug, 2024 | 19:21

Windows Camera Codec Pack Remote Code Execution Vulnerability

Windows Camera Codec Pack Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2019 windows_10 Windows 10 Version 2004 Windows 10 Version 1507 Windows 10 Version 1607 Windows Server version 2004 Windows Server 2019 (Server Core installation)Windows Server 2016 Windows 10 Version 1809 Windows Server 2016 (Server Core installation)Windows Server, version 1909 (Server Core installation)Windows Server 2019 Windows Server version 20H2 Windows 10 Version 1909 Windows 10 Version 20H2

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-5.29% / 89.78%

||

7 Day CHG~0.00%

Published-28 Jun, 2021 | 13:42

Updated-17 Sep, 2024 | 01:01

Adobe Illustrator TTF font parsing out-of-bounds write vulnerability could lead to remote code execution

Adobe Illustrator version 25.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Microsoft Corporation Adobe Inc.

Product-windows illustrator Illustrator

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.01%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.01%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 86.96%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-59.72% / 98.20%

||

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 86.96%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.01%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-6.65% / 91.00%

||

7 Day CHG~0.00%

Published-20 Oct, 2020 | 21:56

Updated-17 Sep, 2024 | 04:15

Adobe Illustrator Memory Corruption Vulnerability

Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.

Vendor-Microsoft Corporation Adobe Inc.

Product-windows illustrator Illustrator

CWE ID-CWE-788

Access of Memory Location After End of Buffer

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.01%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 86.96%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.01%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.01%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 86.96%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-61.49% / 98.28%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.01%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.31% / 86.96%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.01%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.38%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.38%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-8.83% / 92.34%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-50.21% / 97.76%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-4.25% / 88.55%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player enterprise_linux_server chrome_os linux_kernel linux_enterprise_workstation_extension opensuse flash_player_desktop_runtime enterprise_linux_desktop enterprise_linux_workstation linux_enterprise_desktop windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.74% / 85.65%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player enterprise_linux_server chrome_os linux_kernel linux_enterprise_workstation_extension opensuse flash_player_desktop_runtime enterprise_linux_desktop enterprise_linux_workstation linux_enterprise_desktop windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-5.20% / 89.69%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-5.66% / 90.17%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player enterprise_linux_server chrome_os linux_kernel linux_enterprise_workstation_extension opensuse flash_player_desktop_runtime enterprise_linux_desktop enterprise_linux_workstation linux_enterprise_desktop windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.74% / 85.65%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player enterprise_linux_server chrome_os linux_kernel linux_enterprise_workstation_extension opensuse flash_player_desktop_runtime enterprise_linux_desktop enterprise_linux_workstation linux_enterprise_desktop windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.67% / 87.62%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write