CVE-2017-2990: Adobe Flash Player

High severity, CVSS 8.8. EPSS: 9.7% chance of exploitation in the next 30 days.

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution.

Affected products

• Adobe Flash Player: up to and including 24.0.0.194
• Adobe Flash Player Desktop Runtime: up to and including 24.0.0.194

Published 2017-02-15. Last modified 2026-06-17.