CVE-2016-4228: Adobe Flash Player

High severity, CVSS 8.8. EPSS: 33.1% chance of exploitation in the next 30 days.

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.

Affected products

• Adobe Flash Player: up to and including 18.0.0.360; up to and including 22.0.0.192; up to and including 11.2.202.626
• Adobe Flash Player Desktop Runtime: up to and including 22.0.0.192

Published 2016-07-13. Last modified 2026-06-17.