Vulnerability Description
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Flash Player Desktop Runtime | <= 23.0.0.207 |
| Apple | Mac Os X | - |
| Microsoft | Windows | - |
| Adobe | Flash Player | <= 23.0.0.207 |
| Microsoft | Windows 10 | - |
| Microsoft | Windows 8.1 | - |
| Chrome Os | - | |
| Linux | Linux Kernel | - |
References
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.htmlBroken Link
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.htmlBroken Link
- http://rhn.redhat.com/errata/RHSA-2016-2947.htmlThird Party Advisory
- http://www.securityfocus.com/bid/94870Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037442Broken LinkThird Party AdvisoryVDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-15PatchThird Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-39.htmlPatchVendor Advisory
- https://security.gentoo.org/glsa/201701-17Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.htmlBroken Link
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.htmlBroken Link
- http://rhn.redhat.com/errata/RHSA-2016-2947.htmlThird Party Advisory
- http://www.securityfocus.com/bid/94870Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037442Broken LinkThird Party AdvisoryVDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-15PatchThird Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-39.htmlPatchVendor Advisory
FAQ
What is CVE-2016-7890?
CVE-2016-7890 is a vulnerability with a CVSS score of 8.8 (HIGH). Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy.
How severe is CVE-2016-7890?
CVE-2016-7890 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-7890?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Flash Player Desktop Runtime, Apple Mac Os X, Microsoft Windows, Adobe Flash Player, Microsoft Windows 10.