CVE-2016-4176: Adobe Flash Player

High severity, CVSS 8.8. EPSS: 17.6% chance of exploitation in the next 30 days.

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4177.

Affected products

• Adobe Flash Player: up to and including 18.0.0.360; up to and including 22.0.0.192; up to and including 11.2.202.626
• Adobe Flash Player Desktop Runtime: up to and including 22.0.0.192

Published 2016-07-13. Last modified 2026-06-17.