Description
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | flashplugin-nonfree | 11.2.202.637ubuntu0.16.04.1 | — |
| Ubuntu 14.04 LTS | flashplugin-nonfree | 11.2.202.637ubuntu0.14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | flash-plugin | 11.2.202.637-1.el6_8 | RHSA-2016:2057 |
| RHEL 5 | flash-plugin | 11.2.202.637-1.el5_11 | RHSA-2016:2057 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | flash-player | 11.2.202.637-143.1 | SUSE-SU-2016:2512-1 |
Advisories 3
- WID-SEC-2026-3996 Microsoft Windows: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten BSI CERT-Bund (WID) · Oct 15, 2026
- RHSA-2016:2057 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- SUSE-SU-2016:2512-1 Security update for flash-playerqemu SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 93488 vdb-entry
- GLSA-201610-10 vendor-advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-32.html
- RHSA-2016:2057 vendor-advisory
- 1036985 vdb-entry