CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2017-2937
High (8.8) in adobe flash player. EPSS 6.2% chance of exploitation in the next 30 days.
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class inheritance. Successful exploitation could lead to arbitrary code execution.
Severity
- EPSS
- 6.2% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- adobe:flash_player