CVE-2016-4117: Adobe Flash Player Arbitrary Code Execution Vulnerability

CISA Known Exploited Vulnerability (KEV)

Description

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

Required action (CISA)

The impacted product is end-of-life and should be disconnected if still in use.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-4117

Weakness behind it

CISA has not recorded a CWE for this entry, so the CVE → CWE → CAPEC → ATT&CK chain cannot be walked from here. That is a gap in the catalogue, not evidence the vulnerability has no weakness class — check the NVD record below.

References

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-4117
• KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog