cvedb.io
CVE-2016-1018
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2016-04-09T01:59:34.277 · Last modified 2026-06-17T00:41:08.097

Summary

Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via crafted JPEG-XR data.

Affected products

adobe — flash_player

Does this affect you?

Add your gear to cvedb and we'll alert you only when adobe ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.