CVE-2017-3085: Adobe Flash Player

High severity, CVSS 7.4. EPSS: 4.5% chance of exploitation in the next 30 days.

Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect.

Affected products

• Adobe Flash Player: up to and including 26.0.0.137
• Adobe Flash Player Desktop Runtime: up to and including 26.0.0.137
• Red Hat Enterprise Linux: version 6.0 only
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only

Published 2017-08-11. Last modified 2026-06-17.