CVE-2016-7863 is a critical use-after-free vulnerability in Adobe Flash Player versions 23.0.0.205 and earlier, and 11.2.202.643 and earlier, impacting various platforms including Adobe, Apple, Google, Linux, Microsoft, and Red Hat. With a CVSS score of 8.8 (HIGH), successful exploitation via a network attack with low complexity could lead to arbitrary code execution, compromising confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 23.0.0.205CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | ||
<= 23.0.0.205CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:* | ||
<= 11.2.202.643CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:* | ||
<= 23.0.0.205CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:* | ||
<= 23.0.0.205CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.