CVSS: 7.6EPSS: 94%CPEs: 4EXPL: 1CVE-2016-1104 – Adobe Flash - Out-of-Bounds Read when Placing Object
https://notcve.org/view.php?id=CVE-2016-1104
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064. Vulnerabilidad no especificada en Adobe Flash Player 21.0.0.213 y versiones anteriores, según se utiliza en las librerías Adobe Flash en Microsoft Internet Explorer 10 y 11 y Microsoft Edge, tiene impacto y vectores de ataque desconocidos, una vulnerabilidad diferente a otras CVEs listadas en MS16-064. Adobe Flash suffers from an out-of-bounds read when placing an object. • https://www.exploit-db.com/exploits/39825 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html http://packetstormsecurity.com/files/137055/Adobe-Flash-Object-Placing-Out-Of-Bounds-Read.html http://rhn.redhat.com/errata/RHSA-2016-1079.html http://www.securityfocus.com/bid/90618 http://www.securitytracker.com/id/1035827 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-064 https://helpx.adobe.com/security/products/flash-player/apsb16-15.html •
CVSS: 7.6EPSS: 95%CPEs: 4EXPL: 1CVE-2016-1105 – Adobe Flash - Type Confusion in FileReference Constructor
https://notcve.org/view.php?id=CVE-2016-1105
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064. Vulnerabilidad no especificada en Adobe Flash Player 21.0.0.213 y versiones anteriores, según se utiliza en las librerías Adobe Flash en Microsoft Internet Explorer 10 y 11 y Microsoft Edge, tiene impacto y vectores de ataque desconocidos, una vulnerabilidad diferente a otras CVEs listadas en MS16-064. Adobe Flash suffers from a type confusion vulnerability in the FileReference constructor. • https://www.exploit-db.com/exploits/39829 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html http://packetstormsecurity.com/files/137056/Adobe-Flash-FileReference-Type-Confusion.html http://rhn.redhat.com/errata/RHSA-2016-1079.html http://www.securitytracker.com/id/1035827 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-064 https://helpx.adobe.com/security/products/flash-player/apsb16-15.html https://access.redhat.com/security/cve/CVE-2016 •
CVSS: 7.6EPSS: 95%CPEs: 4EXPL: 1CVE-2016-1106 – Adobe Flash - SetNative Use-After-Free
https://notcve.org/view.php?id=CVE-2016-1106
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064. Vulnerabilidad no especificada en Adobe Flash Player 21.0.0.213 y versiones anteriores, según se utiliza en las librerías Adobe Flash en Microsoft Internet Explorer 10 y 11 y Microsoft Edge, tiene impacto y vectores de ataque desconocidos, una vulnerabilidad diferente a otras CVEs listadas en MS16-064. Adobe Flash suffers from a use-after-free vulnerability in SetNative. • https://www.exploit-db.com/exploits/39831 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html http://packetstormsecurity.com/files/137057/Adobe-Flash-SetNative-Use-After-Free.html http://rhn.redhat.com/errata/RHSA-2016-1079.html http://www.securitytracker.com/id/1035827 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-064 https://helpx.adobe.com/security/products/flash-player/apsb16-15.html https://access.redhat.com/security/cve/CVE-2016 •
CVSS: 7.6EPSS: 95%CPEs: 4EXPL: 1CVE-2016-4108 – Adobe Flash - addProperty Use-After-Free
https://notcve.org/view.php?id=CVE-2016-4108
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064. Vulnerabilidad no especificada en Adobe Flash Player 21.0.0.213 y versiones anteriores, según se utiliza en las librerías Adobe Flash en Microsoft Internet Explorer 10 y 11 y Microsoft Edge, tiene impacto y vectores de ataque desconocidos, una vulnerabilidad diferente a otras CVEs listadas en MS16-064. Adobe Flash suffers from a use-after-free vulnerability in addProperty. • https://www.exploit-db.com/exploits/39830 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html http://packetstormsecurity.com/files/137058/Adobe-Flash-addProperty-Use-After-Free.html http://rhn.redhat.com/errata/RHSA-2016-1079.html http://www.securitytracker.com/id/1035827 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-064 https://helpx.adobe.com/security/products/flash-player/apsb16-15.html https://access.redhat.com/security/cve/CVE-2016& •
CVSS: 10.0EPSS: 97%CPEs: 5EXPL: 4CVE-2016-4117 – Adobe Flash Player Arbitrary Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2016-4117
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016. Adobe Flash Player 21.0.0.226 y versiones anteriores permite a atacantes remotos ejecutar código arbitrario a través de vectores no especificados, según se ha explotado activamente en Mayo de 2016. An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution. • https://www.exploit-db.com/exploits/46339 https://github.com/hybridious/CVE-2016-4117 https://github.com/amit-raut/CVE-2016-4117-Report http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00046.html http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00047.html http://rhn.redhat.com/errata/RHSA-2016-1079.html http:&# •