CVE-2016-4171

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.htmlMailing List, Third Party Advisory
http://www.securityfocus.com/bid/91184Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036094Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2016:1238Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsa16-03.htmlVendor Advisory
https://helpx.adobe.com/security/products/flash-player/apsb16-18.htmlVendor Advisory
https://security.gentoo.org/glsa/201606-08Third Party Advisory
https://www.kb.cert.org/vuls/id/748992Third Party Advisory, US Government Resource
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.htmlMailing List, Third Party Advisory
http://www.securityfocus.com/bid/91184Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036094Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2016:1238Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsa16-03.htmlVendor Advisory
https://helpx.adobe.com/security/products/flash-player/apsb16-18.htmlVendor Advisory
https://security.gentoo.org/glsa/201606-08Third Party Advisory
https://www.kb.cert.org/vuls/id/748992Third Party Advisory, US Government Resource
https://github.com/cisagov/vulnrichment/issues/196Issue Tracking
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4171US Government Resource

Timeline

Published: Jun 16, 2016
Last modified: Jun 17, 2026
Added to CISA KEV: Mar 25, 2022
NVD status: Analyzed

Related CVEs from 2016