Adobe Patch Tuesday, November 2016: the CVEs

Adobe Patch Tuesday November 2016: the CVEs Adobe published on 8 November 2016, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Microsoft, SAP. Earlier: Oct 2016, Sep 2016, Aug 2016, Jul 2016, Jun 2016, May 2016, Apr 2016, Mar 2016, Feb 2016, Jan 2016, Dec 2015, Nov 2015. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 8.8CVE-2016-7865EPSS 7.2%2016-11-08

   Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

2. 8.8CVE-2016-7864EPSS 7.0%2016-11-08

   Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

3. 8.8CVE-2016-7863EPSS 7.1%2016-11-08

   Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

4. 8.8CVE-2016-7862EPSS 7.1%2016-11-08

   Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

5. 8.8CVE-2016-7861EPSS 7.3%2016-11-08

   Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

6. 8.8CVE-2016-7860EPSS 7.3%2016-11-08

   Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

7. 8.8CVE-2016-7859EPSS 7.0%2016-11-08

   Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

8. 8.8CVE-2016-7858EPSS 7.0%2016-11-08

   Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

9. 8.8CVE-2016-7857EPSS 7.0%2016-11-08

   Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

10. 6.1CVE-2016-7851ExploitEPSS 7.0%2016-11-08

    Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.