CVE-2017-3001: Adobe Flash Player

High severity, CVSS 8.8. EPSS: 5.1% chance of exploitation in the next 30 days.

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution.

Affected products

• Adobe Flash Player: up to and including 24.0.0.221
• Adobe Flash Player Desktop Runtime: up to and including 24.0.0.221

Published 2017-03-14. Last modified 2026-06-17.