What’s Vulnerable › Vulnerabilities

CVE-2016-4128

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-06-16 · updated 2026-06-17
• Weakness: CWE-787

Description

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Affected products

• Adobe Flash Player 24.0.0.186 and earlier.: through 11.2.202.621; through 18.0.0.352; through 21.0.0.242
• Adobe Flash Player Desktop Runtime: through 21.0.0.242
• Opensuse: 13.1, 13.2
• RedHat Enterprise Linux Desktop: 5.0, 6.0
• RedHat Enterprise Linux Server: 5.0, 6.0
• RedHat Enterprise Linux Workstation: 5.0, 6.0
• SUSE Linux Enterprise Server 15 SP1: 12, 12-sp1
• SUSE Linux Enterprise Workstation Extension: 12, 12-sp1

References

• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
• http://www.securitytracker.com/id/1036117
• https://access.redhat.com/errata/RHSA-2016:1238
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-083
• https://helpx.adobe.com/security/products/flash-player/apsb16-18.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
• http://www.securitytracker.com/id/1036117
• https://access.redhat.com/errata/RHSA-2016:1238

Get alerted when CVE-2016-4128 or the next vulnerability affects your stack