CVE-2017-2999

8.8 highEPSS 4.1%

High (8.8) in adobe. EPSS 4.1% chance of exploitation in the next 30 days.

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2017-03-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:flash_player
adobe:flash_player_desktop_runtime

References

http://rhn.redhat.com/errata/RHSA-2017-0526.html
http://www.securityfocus.com/bid/96866
http://www.securitytracker.com/id/1037994
https://helpx.adobe.com/security/products/flash-player/apsb17-07.html
https://security.gentoo.org/glsa/201703-02

Check your stack JSON