CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2017-3106
High (8.8). EPSS 22% chance of exploitation in the next 30 days.
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
Severity
- EPSS
- 22% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CWE
- CWE-704
- Published
- Modified
- Record from
- the NVD, synced
Affected
- adobe:flash_player
- adobe:flash_player_desktop_runtime
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_workstation