CVE-2016-4117
Redhat Enterprise Linux Desktop 5.0 … 6.0
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2016-4117 is a critical-severity an unspecified weakness vulnerability in Redhat Enterprise Linux Desktop. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 0.1% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
Adobe Flash Player versions 21.0.0.226 and earlier contain a remote code execution vulnerability that can be triggered through unspecified vectors. The flaw received a CVSS score of 9.8 and is tracked under CVE-2016-4117 with no associated CWE entry.
Remote attackers can exploit the issue over the network without authentication or user interaction to execute arbitrary code on affected systems. The vulnerability was actively exploited in the wild during May 2016.
OpenSUSE and Red Hat security advisories reference distribution-specific updates that address the flaw in Adobe Flash Player packages. The issue's public disclosure coincided with observed in-the-wild exploitation campaigns.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2016-5118
Vulnerability Data
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
- CWE(s)
- KEV Date Added
- 03 March 2022
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.