CVE-2017-3085

PoC —

CVSS 3.1

7.4 high

EPSS

4%p91

Published

Aug 11, 2017 (Aug 11, 2017)

Modified

Jun 17, 2026

Description

Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect.

Vendors: adobe redhat
Products: flash player desktop runtime, flash player, enterprise linux, enterprise linux desktop, enterprise linux workstation
Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news1 stories

Adobe patches 80 vulnerabilities in its products, including Flash Player, Reader, and Acrobat

Security AffairsAug 9, 07:42 UTC · Aug 9, 2017Vulnerability CVE-2017-3085 CVE-2017-3106 CVE-2017-3108+4 CVEs