CVE-2017-11281: Adobe Flash Player

Critical severity, CVSS 9.8. EPSS: 33.9% chance of exploitation in the next 30 days.

Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.

Affected products

• Adobe Flash Player: up to and including 26.0.0.151
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only

Published 2017-12-01. Last modified 2026-06-17.