CVE-2017-2997: Adobe Flash Player

High severity, CVSS 8.8. EPSS: 7.4% chance of exploitation in the next 30 days.

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code execution.

Affected products

• Adobe Flash Player: up to and including 24.0.0.221
• Adobe Flash Player Desktop Runtime: up to and including 24.0.0.221

Published 2017-03-14. Last modified 2026-06-17.