CVE-2016-7866
CriticalSummary
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Risk Assessment
Exploitation of this vulnerability could allow attackers to execute malicious code on the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Adobe Animate to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Adobe Animate
See all- CVE-2026-48349High
An Incorrect Authorization vulnerability in Animate could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction but depends on conditions beyond the attacker's control. The scope of the vulnerability has changed.
- CVE-2025-54270Medium
A NULL Pointer Dereference vulnerability in Adobe Animate versions 23.0.13, 24.0.10 and earlier could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation requires user interaction in that a victim must open a malicious file.
- CVE-2025-54269Medium
An out-of-bounds read vulnerability in Adobe Animate versions 23.0.13, 24.0.10 and earlier could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation requires user interaction in that a victim must open a malicious file.
Original NVD description (English source)
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS