ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0743.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-21.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-279A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: http://www.securityfocus.com/bid/43740

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.vupen.com/english/advisories/2011/0191	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43025	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416	vdb-entry signature x_refsource_OVAL x_transferred
http://security.gentoo.org/glsa/glsa-201101-08.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0743.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.adobe.com/support/security/bulletins/apsb10-21.html	x_refsource_CONFIRM x_transferred
http://www.us-cert.gov/cas/techalerts/TA10-279A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.securityfocus.com/bid/43740	vdb-entry x_refsource_BID x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html	vendor-advisory x_refsource_SUSE x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0191

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0743.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-21.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-279A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://www.securityfocus.com/bid/43740

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:06 Oct, 2010 | 17:00

Updated At:29 Apr, 2026 | 01:13

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat 9.x before 9.4 on Linux allow attackers to gain privileges via unknown vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*

>>acrobat_reader>>9.0

cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.1

cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.1

cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.2

cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.3

cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.2

cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.3

cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.1

cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.2

cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.3

cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.4

cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*

>>acrobat>>9.0

cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*

>>acrobat>>9.1

cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*

>>acrobat>>9.1.1

cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*

>>acrobat>>9.1.2

cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*

>>acrobat>>9.1.3

cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*

>>acrobat>>9.2

cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*

>>acrobat>>9.3

cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*

>>acrobat>>9.3.1

cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*

>>acrobat>>9.3.2

cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*

>>acrobat>>9.3.3

cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*

>>acrobat>>9.3.4

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

Evaluator Impact

Per: http://www.adobe.com/support/security/bulletins/apsb10-21.html 'This update resolves multiple potential Linux-only privilege escalation issues (CVE-2010-2887).'

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html	psirt@adobe.com	N/A
http://secunia.com/advisories/43025	psirt@adobe.com	N/A
http://security.gentoo.org/glsa/glsa-201101-08.xml	psirt@adobe.com	N/A
http://www.adobe.com/support/security/bulletins/apsb10-21.html	psirt@adobe.com	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0743.html	psirt@adobe.com	N/A
http://www.securityfocus.com/bid/43740	psirt@adobe.com	N/A
http://www.us-cert.gov/cas/techalerts/TA10-279A.html	psirt@adobe.com	US Government Resource
http://www.vupen.com/english/advisories/2011/0191	psirt@adobe.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43025	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201101-08.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.adobe.com/support/security/bulletins/apsb10-21.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0743.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/43740	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA10-279A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.vupen.com/english/advisories/2011/0191	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-21.html

Source: psirt@adobe.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0743.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/43740

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-279A.html

Source: psirt@adobe.com

Resource:

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2011/0191

Source: psirt@adobe.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-21.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0743.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/43740

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-279A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2011/0191

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1343Records found

CVE-2016-7857

Matching Score-8

Matching Score-8

Product-windows_10 flash_player_for_linux mac_os_x windows_8.1 enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows flash_player windows_server_2016 linux_kernel windows_rt_8.1 chrome_os windows_server_2012 Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

CVSS Score-8.8||HIGH

EPSS-8.08% / 92.24%

7 Day CHG~0.00%

Published-08 Nov, 2016 | 17:45

Updated-06 May, 2026 | 22:30

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-416

Use After Free

CVE-2016-7865

Matching Score-8

Matching Score-8

Product-windows_10 flash_player_for_linux mac_os_x windows_8.1 chrome_os enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows flash_player windows_server_2016 linux_kernel windows_rt_8.1 windows_server_2012 Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

CVSS Score-8.8||HIGH

EPSS-11.16% / 93.58%

7 Day CHG~0.00%

Published-08 Nov, 2016 | 17:45

Updated-06 May, 2026 | 22:30

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2016-6985

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.50% / 87.77%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-6929

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.46%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-6923

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.46%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-6930

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.46%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-6921

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.46%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-6924

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.42%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, and CVE-2016-6922.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 windows_8.1 mac_os_x windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-6931

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.65% / 85.96%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4122

Matching Score-8

Matching Score-8

Product-windows_10 linux_enterprise_desktop mac_os_x enterprise_linux_workstation enterprise_linux_server windows_8.1 linux_enterprise_workstation_extension enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os opensuse n/a

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.16%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4140

Matching Score-8

Matching Score-8

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_workstation enterprise_linux_server windows flash_player windows_rt_8.1 opensuse n/a

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4141

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4243

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4245

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4152

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.25% / 88.92%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4124

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.16%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4181

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.76%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4237

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4238

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4148

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4217

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.20% / 90.03%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4156

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.97% / 89.80%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4127

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.16%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4249

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-10.45% / 93.33%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4172

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.76%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4220

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4154

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.25% / 88.92%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4282

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.42%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4285

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.42%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4145

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4272

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.46%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4244

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4174

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-7.71% / 92.02%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4144

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4131

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4183

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.76%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4280

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.42%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4226

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-75.31% / 98.91%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4242

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4234

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4231

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-67.41% / 98.59%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, and CVE-2016-4248.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4236

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4143

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4274

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.42%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4241

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4287

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-7.67% / 91.99%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Integer overflow in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2016-4283

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.42%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4176

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-48.23% / 97.78%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4182

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-11.54% / 93.72%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4179

Matching Score-8

Matching Score-8