CVE-2016-1014

—

CVSS 3.1

7.3 high

EPSS

1%p66

Published

Apr 9, 2016 (Apr 9, 2016)

Modified

Jun 17, 2026

Description

Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in an unspecified directory.

Vendors: adobe
Products: flash player, flash player desktop runtime, air desktop runtime, air sdk, air sdk \& compiler
Weakness: CWE-426
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.