Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-1027

Fixed in a distro release EPSS 4%

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

Published 2016-04-09 · CVE record · OSV

Products: adobe flash_player, adobe flash_player_desktop_runtime, adobe air_desktop_runtime, adobe air_sdk, adobe air_sdk_&_compiler

Distro releases

ReleasePackageFixed in
Red Hat rhel extras 5flash-plugin0:11.2.202.616-1.el5
Red Hat rhel extras 6flash-plugin0:11.2.202.616-1.el6_7
SUSE Linux Enterprise Desktop 12flash-player11.2.202.621-130.1
SUSE Linux Enterprise Desktop 12 SP1flash-player11.2.202.621-130.1
SUSE Linux Enterprise Workstation Extension 12flash-player11.2.202.621-130.1
SUSE Linux Enterprise Workstation Extension 12 SP1flash-player11.2.202.621-130.1
Ubuntu 14.04 LTSflashplugin-nonfree11.2.202.616ubuntu0.14.04.1