CVE-2017-3078

9.8 criticalEPSS 31%

Critical (9.8) in adobe flash player. EPSS 31% chance of exploitation in the next 30 days.

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 31% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-06-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:flash_player

References

http://www.securityfocus.com/bid/99025
http://www.securitytracker.com/id/1038655
https://access.redhat.com/errata/RHSA-2017:1439
https://helpx.adobe.com/security/products/flash-player/apsb17-17.html
https://security.gentoo.org/glsa/201707-15

Check your stack JSON