cbcvebase.
CVE-2016-4228
published 2016-07-13

CVE-2016-4228: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on…

high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EXPLOIT
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.

Affected

4 ranges
VendorProductVersion rangeFixed in
adobeflash_player<= 18.0.0.360—
adobeflash_player<= 22.0.0.192—
adobeflash_player<= 11.2.202.626—
adobeflash_player_desktop_runtime<= 22.0.0.192—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH