CVE-2016-4117 — Adobe Flash Player: confirmed used in ransomware

CISA's KEV entry for CVE-2016-4117 now records known ransomware use; the entry itself dates from 2022-03-03. Anyone who judged it not ransomware-relevant and closed the ticket was never told.