CVE-2016-7892
Adobe Flash Player Use-After-Free Vulnerability
Published Dec 14, 2016 · updated Jun 16, 2026 · adobe flash player desktop runtime
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Dec 14, 2016 · Catalog
Detected
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.
Mar 25, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Apr 15, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jun 16, 2026 · Catalog
Updated
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Apr 15, 2022
Affected
- cpe adobe/flash playerversion unspecified
- cpe adobe/flash player desktop runtimeversion unspecified
- vendor Adobe Flash Playerversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2016-7892
Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.
cisa.gov - CVE.orgVulnerability recordCVE-2016-7892
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2016-7892
30-day exploitation probability 18.8%
first.org - NIST NVDVulnerability recordCVE-2016-7892
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.
nvd.nist.gov