CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
Published Jun 16, 2016 · updated Jun 16, 2026 · adobe flash player
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Timeline
Detection, updates, and resolution for this record.
Jun 16, 2016 · Catalog
Detected
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Mar 25, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Apr 15, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jun 16, 2026 · Catalog
Updated
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Apr 15, 2022
Affected
- cpe adobe/flash playerversion unspecified
- cpe opensuse/opensuse13.1
- cpe redhat/enterprise linux desktop5.0
- vendor Adobe Flash Playerversion unspecified
Sources
- CISA KEVCVE-2016-4171
Unspecified vulnerability in Adobe Flash Player allows for remote code execution.
cisa.gov - CVE.orgCVE-2016-4171
Official CVE identifier
cve.org - FIRST EPSSCVE-2016-4171
30-day exploitation probability 20.1%
first.org - NIST NVDCVE-2016-4171
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
nvd.nist.gov