Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion."
https://security.gentoo.org/glsa/201610-10
https://helpx.adobe.com/security/products/flash-player/apsb16-32.html