Medium WID-SEC-2026-3996 13 CVEs

Microsoft Windows: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten

Published Oct 11, 2016 · Updated Oct 15, 2026 · Revision 5 · de-DE

Vendor: Microsoft Product: Windows 10 Product: Windows 10 for 32-bit Systems Product: Windows 10 for x64-based Systems Product: Windows 8.1 for 32-bit Systems Product: Windows 8.1 for x64-based Systems Product: Windows RT 8.1 Product: Windows Server 2012 Product: Windows Server 2012 R2 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Adobe Flash Player ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.

Product

Windows ist ein Betriebssystem von Microsoft.
Microsoft Windows RT ist eine Version des Windows-Betriebssystems von Microsoft für Geräte basierend auf der ARM-Architektur, wie beispielsweise Tablet-Computer.

Vulnerabilities 13

Unscored —

CVE-2016-4273 Public exploit EPSS 20%

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-4286

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-6981

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-6982

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-6983

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-6984

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-6985

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-6986

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-6987

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-6989

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-6990

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…

flashplugin-nonfree Ubuntu

Oct 13, 2016
Unscored —

CVE-2016-6991 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not …

May 11, 2017
Unscored —

CVE-2016-6992

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.63…

flashplugin-nonfree Ubuntu

Oct 13, 2016

Revision history

2026-10-15 #5
Referenz(en) aufgenommen: EUVD-2016-7876
2016-10-11 #1
Initial Release
2016-10-11 #2
Version nicht vorhanden
2016-10-11 #3
Version nicht vorhanden
2016-10-11 #4
Version nicht vorhanden

References

Microsoft Security Buletin MS 16-127 vom 2016-10-11
https://technet.microsoft.com/library/security/MS16-127