Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Flash_player | — | adobe-air-upgrade-21-0-0-215adobe-flash-upgrade-11-2-202-621-linuxadobe-flash-upgrade-18-0-0-352-macosxadobe-flash-upgrade-18-0-0-352-windowsadobe-flash-upgrade-21-0-0-242-macosxadobe-flash-upgrade-21-0-0-242-windows | May 12, 2016 | May 10, 2016 |
| Freebsd | freebsd-upgrade-package-linux-c6-flashpluginfreebsd-upgrade-package-linux-c6_64-flashpluginfreebsd-upgrade-package-linux-f10-flashplugin | Dec 10, 2025 | Jun 19, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-www-plugins-adobe-flash | Oct 30, 2017 | May 10, 2016 | |
| Suse | — | suse-upgrade-flash-playersuse-upgrade-flash-player-gnome | May 17, 2016 | May 10, 2016 |
| Ubuntu | ubuntu-upgrade-adobe-flashpluginubuntu-upgrade-flashplugin-nonfree | Nov 19, 2024 | May 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub