CVE-2017-3062: Adobe Flash Player

Critical severity, CVSS 9.8. EPSS: 9.5% chance of exploitation in the next 30 days.

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property. Successful exploitation could lead to arbitrary code execution.

Affected products

• Adobe Flash Player: up to and including 25.0.0.127

Published 2017-04-12. Last modified 2026-06-17.