Known exploited vulnerability · Adobe

CVE-2016-4171: Adobe Flash Player Remote Code Execution Vulnerability

criticalCVSS 3.1 9.8Exploited

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

Published Jun 16, 2016 · Updated Jun 17, 2026

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Advisory details

From the National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Adobe vulnerabilities

All Adobe entries