CVE-2016-0974

🗓️ 10 Feb 2016 20:00:00Reported by adobeType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 261 Views🌐 WEB

CVE-2016-0974 Adobe Flash Player use-after-free vulnerabilit

Reporter	Title	Published	Views	Family All 83
zdt	Adobe Flash - LoadVars.decode Use-After-Free	17 Feb 201600:00	–	zdt
FreeBSD	flash -- multiple vulnerabilities	9 Feb 201600:00	–	freebsd
Tenable Nessus	Flash Player < 20.0.0.306 Multiple Vulnerabilities (APSB16-04)	30 Mar 201600:00	–	nessus
Tenable Nessus	Adobe AIR < 20.0.0.260 Multiple Vulnerabilities (APSB16-04)	30 Mar 201600:00	–	nessus
Tenable Nessus	Adobe AIR <= 20.0.0.233 Multiple Vulnerabilities (APSB16-04)	9 Feb 201600:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)	9 Feb 201600:00	–	nessus
Tenable Nessus	FreeBSD : flash -- multiple vulnerabilities (5d8e56c3-9e67-4d5b-81c9-3a409dfd705f)	11 Feb 201600:00	–	nessus
Tenable Nessus	GLSA-201603-07 : Adobe Flash Player: Multiple vulnerabilities	14 Mar 201600:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 20.0.0.233 Multiple Vulnerabilities (APSB16-04)	9 Feb 201600:00	–	nessus
Tenable Nessus	Adobe Flash Player for Mac <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)	9 Feb 201600:00	–	nessus

NVD

Node

AND

adobe flash_playerRange≤11.2.202.559

linux linux_kernelMatch-

Node

AND

adobe flash_player_desktop_runtimeRange≤20.0.0.286

apple mac_os_xMatch-

microsoft windowsMatch-

Node

AND

adobe flash_playerRange≤18.0.0.326esr

apple mac_os_xMatch-

microsoft windowsMatch-

Node

AND

microsoft windows_10Match-

microsoft windows_8.1Match-

adobe flash_playerRange≤20.0.0.272internet_explorer

Node

AND

adobe flash_playerRange≤20.0.0.286chrome

apple mac_os_xMatch-

google chrome_osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

Node

AND

microsoft windows_10Match-

adobe flash_playerRange≤20.0.0.272edge

Node

AND

adobe air_desktop_runtimeRange≤20.0.0.233

apple mac_os_xMatch-

microsoft windowsMatch-

Node

AND

adobe air_sdkRange≤20.0.0.233

apple iphone_osMatch-

apple mac_os_xMatch-

google androidMatch-

microsoft windowsMatch-

Node

AND

adobe air_sdk_&_compilerRange≤20.0.0.233

apple iphone_osMatch-

apple mac_os_xMatch-

google androidMatch-

microsoft windowsMatch-

Source	Link
securitytracker	www.securitytracker.com/id/1034970
rhn	www.rhn.redhat.com/errata/RHSA-2016-0166.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
exploit-db	www.exploit-db.com/exploits/39463/
lists	www.lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html
helpx	www.helpx.adobe.com/security/products/flash-player/apsb16-04.html
security	www.security.gentoo.org/glsa/201603-07
lists	www.lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html

Parameter	Position	Path	Description	CWE
natalie	binary	/exploitdb-bin-sploits/-/raw/main/bin-sploits/39463.zip	Use-after-free in LoadVars.decode leading to arbitrary code execution via decoding parameters while a watch on the decoded object is active.	CWE-416

17 Jun 2026 00:38Current

8.3High risk

Vulners AI Score8.3

CVSS 3.18.8

CVSS 29.3

EPSS0.30774