CVE-2017-3062

—

CVSS 3.0

9.8 critical

EPSS

10%p95

Published

Apr 12, 2017 (Apr 12, 2017)

Modified

Jun 17, 2026

Description

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe
Products: flash player
Weakness: CWE-416
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.5%)

In the news0 stories

No ingested article mentions this CVE yet.