Candidate: CVE-2016-4117 PublicDate: 2016-05-11 01:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4117 https://helpx.adobe.com/security/products/flash-player/apsa16-02.html Description: Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Genwei Jiang Assigned-to: chriscoulson CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL] Patches_flashplugin-nonfree: upstream_flashplugin-nonfree: needs-triage precise_flashplugin-nonfree: released (11.2.202.621ubuntu0.12.04.1) trusty_flashplugin-nonfree: released (11.2.202.621ubuntu0.14.04.1) trusty/esm_flashplugin-nonfree: DNE (trusty was released [11.2.202.621ubuntu0.14.04.1]) vivid/ubuntu-core_flashplugin-nonfree: DNE vivid/stable-phone-overlay_flashplugin-nonfree: DNE wily_flashplugin-nonfree: released (11.2.202.621ubuntu0.15.10.1) xenial_flashplugin-nonfree: released (11.2.202.621ubuntu0.16.04.1) devel_flashplugin-nonfree: released (11.2.202.621ubuntu1) Patches_adobe-flashplugin: upstream_adobe-flashplugin: needs-triage precise_adobe-flashplugin: released (1:20160512.1-0ubuntu0.12.04.1) trusty_adobe-flashplugin: released (1:20160512.1-0ubuntu0.14.04.1) trusty/esm_adobe-flashplugin: DNE (trusty was released [1:20160512.1-0ubuntu0.14.04.1]) vivid/ubuntu-core_adobe-flashplugin: DNE vivid/stable-phone-overlay_adobe-flashplugin: DNE wily_adobe-flashplugin: released (1:20160512.1-0ubuntu0.15.10.1) xenial_adobe-flashplugin: released (1:20160512.1-0ubuntu0.16.04.1) devel_adobe-flashplugin: released (1:20160512.1-0ubuntu1)