CVE-2017-2985: Adobe Flash Player

High severity, CVSS 8.8. EPSS: 21.8% chance of exploitation in the next 30 days.

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution.

Affected products

• Adobe Flash Player: up to and including 24.0.0.194
• Adobe Flash Player Desktop Runtime: up to and including 24.0.0.194

Published 2017-02-15. Last modified 2026-06-17.