cpe:/a:adobe:air_desktop_runtime:21.0.0.198 cpe:/a:adobe:air_sdk:21.0.0.198 cpe:/a:adobe:air_sdk_%26_compiler:21.0.0.198 cpe:/a:adobe:flash_player:11.2.202.616 cpe:/a:adobe:flash_player:18.0.0.343::~~esr~~~ cpe:/a:adobe:flash_player:21.0.0.216::~~~chrome~~ cpe:/a:adobe:flash_player:21.0.0.226 cpe:/a:adobe:flash_player:21.0.0.241::~~~edge~~ cpe:/a:adobe:flash_player:21.0.0.241::~~~internet_explorer~~ CVE-2016-4121 2016-06-16T10:59:01.637-04:00 2018-01-04T21:30:45.713-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2016-06-17T18:21:10.883-04:00 BID 90797 GENTOO GLSA-201606-08 REDHAT RHSA-2016:1079 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb16-15.html Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1097, CVE-2016-1106, CVE-2016-1107, CVE-2016-1108, CVE-2016-1109, CVE-2016-1110, CVE-2016-4108, and CVE-2016-4110.