CVE-2017-3083

—

CVSS 3.0

9.8 critical

EPSS

14%p96

Published

Jun 20, 2017 (Jun 20, 2017)

Modified

Jun 17, 2026

Description

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media stream. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe
Products: flash player
Weakness: CWE-416
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (14.4%)

In the news1 stories

Adobe patches tens of vulnerabilities in Flash Player, Shockwave Player, Captivate and Digital Editions

Security AffairsJun 14, 05:19 UTC · Jun 14, 2017Vulnerability CVE-2017-3075 CVE-2017-3081 CVE-2017-3083+7 CVEs