CVE-2017-2999: Adobe Flash Player

High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days.

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution.

Affected products

• Adobe Flash Player: up to and including 24.0.0.221
• Adobe Flash Player Desktop Runtime: up to and including 24.0.0.221

Published 2017-03-14. Last modified 2026-06-17.