CVE-2016-0959

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flash Player for Internet Explorer 10 and 11 before 20.0.0.267, Adobe Flash Player for Linux before 11.2.202.559, AIR Desktop Runtime before 20.0.0.233, AIR SDK before 20.0.0.233, AIR SDK & Compiler before 20.0.0.233, AIR for Android before 20.0.0.233.

• CWE-416

• http://rhn.redhat.com/errata/RHSA-2015-2697.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1294580Issue Tracking, Third Party Advisory
• https://helpx.adobe.com/security/products/flash-player/apsb16-01.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-2697.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1294580Issue Tracking, Third Party Advisory
• https://helpx.adobe.com/security/products/flash-player/apsb16-01.htmlVendor Advisory

Published

Jun 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0953Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 bef…
• CVE-2016-0954Adobe Digital Editions before 4.5.1 allows attackers to exec…
• CVE-2016-0955Cross-site scripting (XSS) vulnerability in Adobe Experience…
• CVE-2016-0956The Servlets Post component 2.3.6 in Apache Sling, as used i…
• CVE-2016-0957Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6…
• CVE-2016-0958Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 might allow…
• CVE-2016-0960Adobe Flash Player before 18.0.0.333 and 19.x through 21.x b…8.8
• CVE-2016-0961Adobe Flash Player before 18.0.0.333 and 19.x through 21.x b…8.8
• CVE-2016-0962Adobe Flash Player before 18.0.0.333 and 19.x through 21.x b…8.8
• CVE-2016-0963Integer overflow in Adobe Flash Player before 18.0.0.333 and…8.8
• CVE-2016-0964Adobe Flash Player before 18.0.0.329 and 19.x and 20.x befor…8.8
• CVE-2016-0965Adobe Flash Player before 18.0.0.329 and 19.x and 20.x befor…8.8