CVE-2016-7892
- State
- Published
- Severity
- 8.8 High
- Published
- Dec 15, 2016
- Updated
- Oct 21, 2025
- Reserved
- Sep 9, 2016
Description
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-416 Use After Free
Affected Products
| Product | Versions |
|---|---|
Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earliern/a |
|
References
- SUSE-SU-2016:3148vendor-advisory
- MS16-154vendor-advisory
- GLSA-201701-17vendor-advisory
- 1037442vdb-entry
- RHSA-2016:2947vendor-advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-39.html
- 94877vdb-entry
- openSUSE-SU-2016:3160vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7892government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.