peter bassill · operator
$ cve CVE-2017-11282 JSON

CVE-2017-11282 EXPLOIT

9.8
CRITICAL · CVSS 3.0 · EPSS 34.8% (pctl 98)

Patch early

A public exploit exists.

Description

Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS34.85% — more likely to be exploited than 98% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2017-12-01
Last modified2026-06-17

Affected (10)

VendorProduct
adobeflash player
applemacos
googlechrome os
linuxlinux kernel
microsoftwindows
microsoftwindows 10
microsoftwindows 8.1
redhatenterprise linux desktop
redhatenterprise linux server
redhatenterprise linux workstation

Public exploits

SourceTitleDate
exploit-dbAdobe Flash - Out-of-Bounds Read in applyToRange2017-09-25

References

→ the Explorer  ·  watch your stack  ·  NVD