CVE-2016-4232: Adobe Flash Player

High severity, CVSS 7.5. EPSS: 36.5% chance of exploitation in the next 30 days.

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information from process memory via unspecified vectors.

Affected products

• Adobe Flash Player: up to and including 18.0.0.360; up to and including 22.0.0.192; up to and including 11.2.202.626
• Adobe Flash Player Desktop Runtime: up to and including 22.0.0.192

Published 2016-07-13. Last modified 2026-06-17.