ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/38177	vdb-entry x_refsource_BID x_transferred
http://code.google.com/p/chromium/issues/detail?id=32915	x_refsource_CONFIRM x_transferred
http://www.osvdb.org/62320	vdb-entry x_refsource_OSVDB x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256	vdb-entry signature x_refsource_OVAL x_transferred
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	x_refsource_CONFIRM x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/56217	vdb-entry x_refsource_XF x_transferred
http://securitytracker.com/id?1023583	vdb-entry x_refsource_SECTRACK x_transferred
http://www.vupen.com/english/advisories/2010/0361	vdb-entry x_refsource_VUPEN x_transferred
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/38545	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://www.securityfocus.com/bid/38177

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=32915

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.osvdb.org/62320

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/56217

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://securitytracker.com/id?1023583

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/0361

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:18 Feb, 2010 | 18:00

Updated At:29 Apr, 2026 | 01:13

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

>>chrome>>Versions up to 4.0.249.78(inclusive)

cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*

>>chrome>>0.2.149.27

cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*

>>chrome>>0.2.149.29

cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*

>>chrome>>0.2.149.30

cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*

>>chrome>>0.2.152.1

cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*

>>chrome>>0.2.153.1

cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*

>>chrome>>0.3.154.0

cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*

>>chrome>>0.3.154.3

cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*

>>chrome>>0.4.154.18

cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*

>>chrome>>0.4.154.22

cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*

>>chrome>>0.4.154.31

cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*

>>chrome>>0.4.154.33

cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*

>>chrome>>1.0.154.36

cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*

>>chrome>>1.0.154.39

cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*

>>chrome>>1.0.154.42

cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*

>>chrome>>1.0.154.43

cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*

>>chrome>>1.0.154.46

cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*

>>chrome>>1.0.154.48

cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*

>>chrome>>1.0.154.52

cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*

>>chrome>>1.0.154.53

cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*

>>chrome>>1.0.154.59

cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*

>>chrome>>1.0.154.65

cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*

>>chrome>>2.0.156.1

cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*

>>chrome>>2.0.157.0

cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*

>>chrome>>2.0.157.2

cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*

>>chrome>>2.0.158.0

cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*

>>chrome>>2.0.159.0

cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*

>>chrome>>2.0.169.0

cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*

>>chrome>>2.0.169.1

cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*

>>chrome>>2.0.170.0

cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*

>>chrome>>2.0.172

cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*

>>chrome>>2.0.172.2

cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*

>>chrome>>2.0.172.8

cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*

>>chrome>>2.0.172.27

cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*

>>chrome>>2.0.172.28

cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*

>>chrome>>2.0.172.30

cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*

>>chrome>>2.0.172.31

cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*

>>chrome>>2.0.172.33

cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*

>>chrome>>2.0.172.37

cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*

>>chrome>>2.0.172.38

cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*

>>chrome>>3.0.182.2

cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*

>>chrome>>3.0.190.2

cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*

>>chrome>>3.0.193.2

cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*

>>chrome>>3.0.195.21

cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*

>>chrome>>3.0.195.24

cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*

>>chrome>>3.0.195.32

cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*

>>chrome>>3.0.195.33

Weaknesses

CWE ID	Type	Source
CWE-189	Primary	nvd@nist.gov

CWE ID: CWE-189

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://code.google.com/p/chromium/issues/detail?id=32915	cve@mitre.org	N/A
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html	cve@mitre.org	Patch
http://secunia.com/advisories/38545	cve@mitre.org	Vendor Advisory
http://securitytracker.com/id?1023583	cve@mitre.org	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	cve@mitre.org	Vendor Advisory
http://www.osvdb.org/62320	cve@mitre.org	N/A
http://www.securityfocus.com/bid/38177	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/0361	cve@mitre.org	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/56217	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256	cve@mitre.org	N/A
http://code.google.com/p/chromium/issues/detail?id=32915	af854a3a-2127-422b-91ae-364da2661108	N/A
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html	af854a3a-2127-422b-91ae-364da2661108	Patch
http://secunia.com/advisories/38545	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securitytracker.com/id?1023583	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.osvdb.org/62320	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/38177	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/0361	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/56217	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=32915

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html

Source: cve@mitre.org

Resource:

Patch

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1023583

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.osvdb.org/62320

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/38177

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/0361

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/56217

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=32915

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1023583

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.osvdb.org/62320

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/38177

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/0361

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/56217

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1094Records found

CVE-2016-4136

Matching Score-8

Matching Score-8

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_workstation enterprise_linux_server windows flash_player windows_rt_8.1 opensuse n/a

CVSS Score-8.8||HIGH

EPSS-35.03% / 97.13%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4273

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-54.83% / 98.08%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4249

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-10.45% / 93.37%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4286

Matching Score-8

Matching Score-8

Product-windows_10 windows_8.1 mac_os_x enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CVSS Score-8.8||HIGH

EPSS-2.42% / 85.40%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to bypass intended access restrictions via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-284

Improper Access Control

CVE-2016-4183

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.83%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4276

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.50%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4234

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.50%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4190

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.83%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4155

Matching Score-8

Matching Score-8

Product-windows_10 linux_enterprise_desktop mac_os_x enterprise_linux_workstation enterprise_linux_server windows_8.1 linux_enterprise_workstation_extension enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os opensuse n/a

CVSS Score-8.8||HIGH

EPSS-4.25% / 89.00%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4248

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.27% / 92.39%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, and CVE-2016-4231.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4174

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-7.71% / 92.08%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4233

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.50%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4184

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.83%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4177

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-48.23% / 97.80%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4235

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.50%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4122

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.26%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4152

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.25% / 89.00%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4285

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.50%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4272

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.54%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4147

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4134

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4139

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4188

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.83% / 92.69%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4280

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.50%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4220

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.50%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4275

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-56.72% / 98.17%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4149

Matching Score-8

Matching Score-8

Product-windows_10 linux_enterprise_desktop mac_os_x windows_8.1 enterprise_linux_server enterprise_linux_workstation linux_enterprise_workstation_extension enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os opensuse n/a

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2016-4281

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.50%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4133

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4237

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.50%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4175

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-50.21% / 97.89%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4137

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-35.03% / 97.13%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4132

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4172

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.83%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4283

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.50%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4176

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-48.23% / 97.80%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4182

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-11.54% / 93.77%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4782

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.53% / 67.64%

7 Day CHG~0.00%

Published-23 May, 2016 | 19:00

Updated-06 May, 2026 | 22:30

Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack."

Vendor-n/a Google LLC Lenovo Group Limited

Product-android shareit n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-4123

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.26%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4228

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-75.31% / 98.90%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4217

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.20% / 90.11%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4140

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4240

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.50%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4144

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4242

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.50%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4145

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4221

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.50%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4143

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4142

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.67%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4244

Matching Score-8

Matching Score-8