CVE-2016-1098

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: May 11, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-109806.1The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo.CVE-2016-109816.1The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_t CVE-2016-109828.8The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF.CVE-2016-109836.5The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data.CVE-2016-109846.1The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.CVE-2016-109856.1The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.CVE-2016-109866.1The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret.CVE-2016-109876.1The persian-woocommerce-sms plugin before 3.3.4 for WordPress has ps_sms_numbers XSS.CVE-2016-109886.1The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description CVE-2016-109898.8The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF.CVE-2016-10997.5Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer CVE-2016-109906.1The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.