CVE-2016-7860

CVE Database · CVE-2016-7860

CVE-2016-7860

· N/AModified

CVSS v3.1

N/A

EPSS

7.30%

Published

Nov 8, 2016

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Weaknesses (CWE)

CWE-704

Affected Products (26)

adobe · flash_playervulnerable

apple · mac_os_x

microsoft · windows

adobe · flash_playervulnerable

microsoft · windows_10

microsoft · windows_8.1

microsoft · windows_rt_8.1

microsoft · windows_server_2012

· windows_server_2016

References (14)

http://rhn.redhat.com/errata/RHSA-2016-2676.html

Third Party Advisory

http://www.securityfocus.com/bid/94151

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037240

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-16-601

Third Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-141

PatchVendor Advisory

https://helpx.adobe.com/security/products/flash-player/apsb16-37.html

KEV Catalog EPSS Scores Vendors All CVEs