CVE-2016-4178

published 2016-07-13

CVE-2016-4178: Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass…

medium 4.3 CVSS 3.1

AV N AC L PR N UI R S U C L I N A N

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
adobe	flash_player	<= 18.0.0.360	—
adobe	flash_player	<= 22.0.0.192	—
adobe	flash_player	<= 11.2.202.626	—
adobe	flash_player_desktop_runtime	<= 22.0.0.192	—

CVSS provenance

nvd v3.1 4.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

osv 4.3 MEDIUM

CWE-863 CWE-200