CVE-2016-0959
CriticalSummary
A use after free vulnerability in Adobe Flash Player exists in versions before 20.0.0.267 across various platforms, including Desktop Runtime, Google Chrome, Microsoft Edge, and Internet Explorer. It may lead to unauthorized memory access and potential execution of malicious code.
Risk Assessment
Organizations using vulnerable versions of Adobe Flash Player are at risk of attacks that could lead to system takeover or data leakage.
Recommendation
It is recommended to update Adobe Flash Player to the latest version to mitigate this vulnerability and reduce security risks.
Original NVD description (English source)
Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flash Player for Internet Explorer 10 and 11 before 20.0.0.267, Adobe Flash Player for Linux before 11.2.202.559, AIR Desktop Runtime before 20.0.0.233, AIR SDK before 20.0.0.233, AIR SDK & Compiler before 20.0.0.233, AIR for Android before 20.0.0.233.