CVE-2017-3000: Adobe Flash Player

Medium severity, CVSS 6.5. EPSS: 8.4% chance of exploitation in the next 30 days.

Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure.

Affected products

• Adobe Flash Player: up to and including 24.0.0.221
• Adobe Flash Player Desktop Runtime: up to and including 24.0.0.221

Published 2017-03-14. Last modified 2026-06-17.