CISA description
An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.
CVE-2016-4117
Adobe · Flash Player
Adobe Flash Player Arbitrary Code Execution Vulnerability
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes & references
Where this lands in 800-53
Vulnerability data triggers these controls during assessment and continuous monitoring.