CVE-2016-7857 is a critical use-after-free vulnerability affecting Adobe Flash Player versions 23.0.0.205 and earlier, and 11.2.202.643 and earlier, impacting products across Adobe, Apple, Google, Linux, Microsoft, and Red Hat. This high-severity flaw (CVSS 8.8) can be exploited remotely with low attack complexity, requiring user interaction, and could lead to complete compromise of confidentiality, integrity, and availability through arbitrary code execution. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability garnered significant community discussion and media coverage at the time of its disclosure.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 11.2.202.643CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:* | ||
<= 23.0.0.205CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | ||
<= 23.0.0.205CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:* | ||
<= 23.0.0.205CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:* | ||
<= 23.0.0.205CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.