cve.bz

Adobe Patch Tuesday, March 2017: the CVEs

Filter

Adobe Patch Tuesday March 2017: the CVEs Adobe published on 14 March 2017, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Microsoft, SAP. Earlier: Feb 2017, Jan 2017, Dec 2016, Nov 2016, Oct 2016, Sep 2016, Aug 2016, Jul 2016, Jun 2016, May 2016, Apr 2016, Mar 2016. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 8.8CVE-2017-3003EPSS 5.3%

    Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to ar…

  2. 8.8CVE-2017-3002EPSS 5.1%

    Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful exploitation could lead to arbitrary code execution.

  3. 8.8CVE-2017-3001EPSS 5.1%

    Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution.

  4. 6.5CVE-2017-3000EPSS 8.4%

    Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure.

  5. 8.8CVE-2017-2999EPSS 4.1%

    Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution.

  6. 8.8CVE-2017-2998EPSS 4.1%

    Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation could lead to arbitrary code executio…

  7. 8.8CVE-2017-2997EPSS 7.4%

    Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code executio…

  8. 7.8CVE-2017-2983EPSS 3.0%

    Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to escalation of privilege.