High (8.8) in adobe flash player. EPSS 5.0% chance of exploitation in the next 30 days.
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution.
Severity
CVSS 3.1
8.8 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
5.0% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)