CVE-2016-1102

Home/CVE/Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

CVE

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

HIGH · CVSS 7.5 EPSS 0.39664

Act now

EPSS ≥ 0.10 - elevated exploitation probability
EPSS percentile: top 3% of all CVEs by exploitation likelihood
Public exploit or PoC is available
CVSS base score ≥ 7.0

Sigma rules3 YARA rules0

▤

Affected Products & Versions

microsoft edgeall versions
microsoft internet explorerall versions
adobe flash player<= 21.0.0.213

⚠

Public Exploits & PoCs

dosAdobe Flash - JXR Processing Out-of-Bounds Readverified
pocpacketstormsecurity.com · Adobe-Flash-JXR-Processing-Out-Of-Bounds-Read.htmlpacketstormsecurity.com
pocwww.exploit-db.com · 39824www.exploit-db.com

◈

Sigma Hunt Rules

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

producthighFlash Player Update from Suspicious Location

productmediumInternet Explorer DisableFirstRunCustomize Enabled

productmediumInternet Explorer Autorun Keys Modification

▣