# CVEs published 2016-07-13 131 CVEs were published on July 13, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2015-8808](https://cve.now/CVE-2015-8808.md): The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory (no CVSS) - [CVE-2016-3100](https://cve.now/CVE-2016-3100.md): kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-\_y, which allows local users to obtain X11 cookies of o (no CVSS) - [CVE-2016-4066](https://cve.now/CVE-2016-4066.md): Cross-site request forgery (CSRF) vulnerability in Fortinet FortiWeb before 5.5.3 allows remote attackers to hijack the authentication of ad (no CVSS) - [CVE-2016-4974](https://cve.now/CVE-2016-4974.md): Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of classes available on the classpat (no CVSS, org.apache.qpid:qpid-jms-client) - [CVE-2016-5008](https://cve.now/CVE-2016-5008.md): libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote (no CVSS) - [CVE-2016-5092](https://cve.now/CVE-2016-5092.md): Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privilege (no CVSS) - [CVE-2016-5109](https://cve.now/CVE-2016-5109.md): Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass (no CVSS) - [CVE-2016-5821](https://cve.now/CVE-2016-5821.md): Huawei HiSuite before 4.0.4.204\_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE\_WRITE\_DATA for BUILTIN\\Users) for the H (no CVSS) - [CVE-2016-3204](https://cve.now/CVE-2016-3204.md): The Microsoft (1) JScript 5.8 and 9 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allo (no CVSS) - [CVE-2016-3238](https://cve.now/CVE-2016-3238.md): The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201 (no CVSS) - [CVE-2016-3239](https://cve.now/CVE-2016-3239.md): The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201 (no CVSS) - [CVE-2016-3240](https://cve.now/CVE-2016-3240.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2016-3241](https://cve.now/CVE-2016-3241.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2016-3242](https://cve.now/CVE-2016-3242.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2016-3243](https://cve.now/CVE-2016-3243.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2016-3244](https://cve.now/CVE-2016-3244.md): Microsoft Edge allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge Security Feature (no CVSS) - [CVE-2016-3245](https://cve.now/CVE-2016-3245.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to trick users into making TCP connections to a restricted port via a craft (no CVSS) - [CVE-2016-3246](https://cve.now/CVE-2016-3246.md): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak (no CVSS) - [CVE-2016-3248](https://cve.now/CVE-2016-3248.md): The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft (no CVSS, Microsoft.ChakraCore) - [CVE-2016-3249](https://cve.now/CVE-2016-3249.md): The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 (no CVSS) - [CVE-2016-3250](https://cve.now/CVE-2016-3250.md): The kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted app (no CVSS) - [CVE-2016-3251](https://cve.now/CVE-2016-3251.md): The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, (no CVSS) - [CVE-2016-3252](https://cve.now/CVE-2016-3252.md): The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 (no CVSS) - [CVE-2016-3254](https://cve.now/CVE-2016-3254.md): The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 (no CVSS) - [CVE-2016-3255](https://cve.now/CVE-2016-3255.md): Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing (no CVSS) - [CVE-2016-3256](https://cve.now/CVE-2016-3256.md): Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information (no CVSS) - [CVE-2016-3258](https://cve.now/CVE-2016-3258.md): Race condition in the kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows (no CVSS) - [CVE-2016-3259](https://cve.now/CVE-2016-3259.md): The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft (no CVSS, Microsoft.ChakraCore) - [CVE-2016-3260](https://cve.now/CVE-2016-3260.md): The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and (no CVSS, Microsoft.ChakraCore) - [CVE-2016-3261](https://cve.now/CVE-2016-3261.md): Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information via a crafted web site, aka "Internet Explorer Inform (no CVSS) - [CVE-2016-3264](https://cve.now/CVE-2016-3264.md): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m (no CVSS) - [CVE-2016-3265](https://cve.now/CVE-2016-3265.md): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup (no CVSS, Microsoft.ChakraCore) - [CVE-2016-3269](https://cve.now/CVE-2016-3269.md): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup (no CVSS, Microsoft.ChakraCore) - [CVE-2016-3271](https://cve.now/CVE-2016-3271.md): The VBScript engine in Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, ak (no CVSS) - [CVE-2016-3272](https://cve.now/CVE-2016-3272.md): The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles page-fault sys (no CVSS) - [CVE-2016-3273](https://cve.now/CVE-2016-3273.md): The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code, which allows remot (no CVSS) - [CVE-2016-3274](https://cve.now/CVE-2016-3274.md): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, ak (no CVSS) - [CVE-2016-3276](https://cve.now/CVE-2016-3276.md): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microso (no CVSS) - [CVE-2016-3277](https://cve.now/CVE-2016-3277.md): Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka (no CVSS) - [CVE-2016-3278](https://cve.now/CVE-2016-3278.md): Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office document, (no CVSS) - [CVE-2016-3279](https://cve.now/CVE-2016-3279.md): Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 201 (no CVSS) - [CVE-2016-3280](https://cve.now/CVE-2016-3280.md): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compa (no CVSS) - [CVE-2016-3281](https://cve.now/CVE-2016-3281.md): Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word Automation (no CVSS) - [CVE-2016-3282](https://cve.now/CVE-2016-3282.md): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, O (no CVSS) - [CVE-2016-3283](https://cve.now/CVE-2016-3283.md): Microsoft Word Viewer allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corrupti (no CVSS) - [CVE-2016-3284](https://cve.now/CVE-2016-3284.md): Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Comp (no CVSS) - [CVE-2016-3286](https://cve.now/CVE-2016-3286.md): The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 (no CVSS) - [CVE-2016-3287](https://cve.now/CVE-2016-3287.md): Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Secure (no CVSS) - [CVE-2016-4172](https://cve.now/CVE-2016-4172.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4173](https://cve.now/CVE-2016-4173.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before (no CVSS) - [CVE-2016-4174](https://cve.now/CVE-2016-4174.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before (no CVSS) - [CVE-2016-4175](https://cve.now/CVE-2016-4175.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4176](https://cve.now/CVE-2016-4176.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4177](https://cve.now/CVE-2016-4177.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4178](https://cve.now/CVE-2016-4178.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4179](https://cve.now/CVE-2016-4179.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4180](https://cve.now/CVE-2016-4180.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4181](https://cve.now/CVE-2016-4181.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4182](https://cve.now/CVE-2016-4182.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4183](https://cve.now/CVE-2016-4183.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4184](https://cve.now/CVE-2016-4184.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4185](https://cve.now/CVE-2016-4185.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4186](https://cve.now/CVE-2016-4186.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4187](https://cve.now/CVE-2016-4187.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4188](https://cve.now/CVE-2016-4188.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4189](https://cve.now/CVE-2016-4189.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4190](https://cve.now/CVE-2016-4190.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4191](https://cve.now/CVE-2016-4191.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4192](https://cve.now/CVE-2016-4192.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4193](https://cve.now/CVE-2016-4193.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4194](https://cve.now/CVE-2016-4194.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4195](https://cve.now/CVE-2016-4195.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4196](https://cve.now/CVE-2016-4196.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4197](https://cve.now/CVE-2016-4197.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4198](https://cve.now/CVE-2016-4198.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4199](https://cve.now/CVE-2016-4199.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4200](https://cve.now/CVE-2016-4200.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4201](https://cve.now/CVE-2016-4201.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4202](https://cve.now/CVE-2016-4202.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4203](https://cve.now/CVE-2016-4203.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4204](https://cve.now/CVE-2016-4204.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4205](https://cve.now/CVE-2016-4205.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4206](https://cve.now/CVE-2016-4206.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4207](https://cve.now/CVE-2016-4207.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4208](https://cve.now/CVE-2016-4208.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4209](https://cve.now/CVE-2016-4209.md): Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acroba (no CVSS) - [CVE-2016-4210](https://cve.now/CVE-2016-4210.md): Integer overflow in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro (no CVSS) - [CVE-2016-4211](https://cve.now/CVE-2016-4211.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4212](https://cve.now/CVE-2016-4212.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4213](https://cve.now/CVE-2016-4213.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4214](https://cve.now/CVE-2016-4214.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4215](https://cve.now/CVE-2016-4215.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4216](https://cve.now/CVE-2016-4216.md): XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entit (no CVSS, com.adobe.xmp:xmpcore) - [CVE-2016-4217](https://cve.now/CVE-2016-4217.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4218](https://cve.now/CVE-2016-4218.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4219](https://cve.now/CVE-2016-4219.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4220](https://cve.now/CVE-2016-4220.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4221](https://cve.now/CVE-2016-4221.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4222](https://cve.now/CVE-2016-4222.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before (no CVSS) - [CVE-2016-4223](https://cve.now/CVE-2016-4223.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4224](https://cve.now/CVE-2016-4224.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4225](https://cve.now/CVE-2016-4225.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4226](https://cve.now/CVE-2016-4226.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before (no CVSS) - [CVE-2016-4227](https://cve.now/CVE-2016-4227.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before (no CVSS) - [CVE-2016-4228](https://cve.now/CVE-2016-4228.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before (no CVSS) - [CVE-2016-4229](https://cve.now/CVE-2016-4229.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before (no CVSS) - [CVE-2016-4230](https://cve.now/CVE-2016-4230.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before (no CVSS) - [CVE-2016-4231](https://cve.now/CVE-2016-4231.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before (no CVSS) - [CVE-2016-4232](https://cve.now/CVE-2016-4232.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4233](https://cve.now/CVE-2016-4233.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4234](https://cve.now/CVE-2016-4234.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4235](https://cve.now/CVE-2016-4235.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4236](https://cve.now/CVE-2016-4236.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4237](https://cve.now/CVE-2016-4237.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4238](https://cve.now/CVE-2016-4238.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4239](https://cve.now/CVE-2016-4239.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4240](https://cve.now/CVE-2016-4240.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4241](https://cve.now/CVE-2016-4241.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4242](https://cve.now/CVE-2016-4242.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4243](https://cve.now/CVE-2016-4243.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4244](https://cve.now/CVE-2016-4244.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4245](https://cve.now/CVE-2016-4245.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4246](https://cve.now/CVE-2016-4246.md): Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att (no CVSS) - [CVE-2016-4247](https://cve.now/CVE-2016-4247.md): Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 o (no CVSS) - [CVE-2016-4248](https://cve.now/CVE-2016-4248.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before (no CVSS) - [CVE-2016-4249](https://cve.now/CVE-2016-4249.md): Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11 (no CVSS) - [CVE-2016-4250](https://cve.now/CVE-2016-4250.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4251](https://cve.now/CVE-2016-4251.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4252](https://cve.now/CVE-2016-4252.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4254](https://cve.now/CVE-2016-4254.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4255](https://cve.now/CVE-2016-4255.md): Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acro (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-07-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.