CVE-2016-4176: Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute…

PriorityP263high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

EXPLOIT

EPSS

17.59%

96.8th percentile

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4177.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
adobe	flash_player	<= 18.0.0.360	—
adobe	flash_player	<= 22.0.0.192	—
adobe	flash_player	<= 11.2.202.626	—
adobe	flash_player_desktop_runtime	<= 22.0.0.192	—

Detection & IOCsextracted from sources · hover to see the quote

urlhttps://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40105.zip↗

versionAdobe Flash Player 22.0.0.192↗

→Monitor for Adobe Flash Player (flash-plugin) versions prior to 22.0.0.209 on Windows/OS X and prior to 11.2.202.632 on Linux as vulnerable targets for CVE-2016-4176 exploitation. ↗

·The vulnerability is triggered via unspecified vectors; no specific network-level signature or byte pattern is publicly documented, limiting precise automated detection beyond version checks and SWF file inspection. ↗
·This CVE is distinct from CVE-2016-4177, which is a separate stack memory corruption vulnerability in the same Flash Player versions; detection rules should account for both. ↗

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C

osv8.8HIGH

vendor_redhat8.8HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.