CVE-2016-4225: Adobe Flash Player

High severity, CVSS 8.8. EPSS: 7.4% chance of exploitation in the next 30 days.

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2016-4223 and CVE-2016-4224.

Affected products

• Adobe Flash Player: up to and including 18.0.0.360; up to and including 22.0.0.192; up to and including 11.2.202.626
• Adobe Flash Player Desktop Runtime: up to and including 22.0.0.192

Published 2016-07-13. Last modified 2026-06-17.