CVE-2016-7860
Publication date 8 November 2016
Last updated 25 August 2025
Ubuntu priority
Description
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| adobe-flashplugin | ||
| 16.04 LTS xenial |
Fixed 1:20161108.1-0ubuntu0.16.04.1
|
|
| 14.04 LTS trusty |
Fixed 1:20161108.1-0ubuntu0.14.04.1
|
|
| flashplugin-nonfree | ||
| 16.04 LTS xenial |
Fixed 11.2.202.644ubuntu0.16.04.1
|
|
| 14.04 LTS trusty |
Fixed 11.2.202.644ubuntu0.14.04.1
|
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
8.8 · High
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H