Code execution vulnerabilities in Adobe Flash Player

Description

Multiple type confusion and use-after-free vulnerabilities were found in Adobe Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely.

---

Technical details

To update Adobe Flash Player ActiveX (detected as Flash.ocx) on Windows 8 and higher, install latest updates from Control Panel

Original advisories

• Adobe advisory

• Adobe Flash Player ESR end of support announcement

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Adobe-Flash-Player-ActiveX
• Adobe-Flash-Player-NPAPI
• Adobe-Flash-Player-PPAPI

CVE list

• CVE-2016-7865
  critical
• CVE-2016-7864
  critical
• CVE-2016-7863
  critical
• CVE-2016-7862
  critical
• CVE-2016-7861
  critical
• CVE-2016-7860
  critical
• CVE-2016-7859
  critical
• CVE-2016-7858
  critical
• CVE-2016-7857
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com