CVE-2016-4247: Adobe Flash Player

Medium severity, CVSS 5.3. EPSS: 3.2% chance of exploitation in the next 30 days.

Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors.

Affected products

• Adobe Flash Player: up to and including 18.0.0.360; up to and including 22.0.0.192; up to and including 11.2.202.626
• Adobe Flash Player Desktop Runtime: up to and including 22.0.0.192

Published 2016-07-13. Last modified 2026-06-17.