CVE-2017-3081

9.8 criticalEPSS 14%

Critical (9.8) in adobe flash player. EPSS 14% chance of exploitation in the next 30 days.

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploitation could lead to arbitrary code execution.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2017-06-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:flash_player

References

http://www.securityfocus.com/bid/99023
http://www.securitytracker.com/id/1038655
https://access.redhat.com/errata/RHSA-2017:1439
https://helpx.adobe.com/security/products/flash-player/apsb17-17.html
https://security.gentoo.org/glsa/201707-15

Check your stack JSON