Adobe Flash Player Arbitrary Code Execution Vulnerability

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

cat cve-2016-4117.json

Vendor: Adobe
Product: Flash Player
CVSS: 9.8
EPSS (exploit probability): 94.4%
Status: kev
CISA patch-by (BOD 22-01): March 24, 2022
Published: March 3, 2022
Source: https://nvd.nist.gov/vuln/detail/CVE-2016-4117

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

Added to CISA’s Known Exploited Vulnerabilities catalog on 2022-03-03. Required action per CISA: The impacted product is end-of-life and should be disconnected if still in use. Due date: 2022-03-24.

This is an auto-synced KEV catalog record pending a full 0dayNews write-up — see CISA’s KEV catalog and the NVD record linked above for primary sources.