CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-2995

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.041

EPSS Ranking 88.1%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.3

References

Products affected by CVE-2017-2995

Adobe » Flash Player » Version: 16.0.0.287

cpe:2.3:a:adobe:flash_player:16.0.0.287
Adobe » Flash Player » Version: 18.0

cpe:2.3:a:adobe:flash_player:18.0
Adobe » Flash Player » Version: 18.0.0.203

cpe:2.3:a:adobe:flash_player:18.0.0.203
Adobe » Flash Player » Version: 18.0.0.204

cpe:2.3:a:adobe:flash_player:18.0.0.204
Adobe » Flash Player » Version: 19.0.0.245

cpe:2.3:a:adobe:flash_player:19.0.0.245
Adobe » Flash Player » Version: 20.0.0.228

cpe:2.3:a:adobe:flash_player:20.0.0.228
Adobe » Flash Player » Version: 20.0.0.306

cpe:2.3:a:adobe:flash_player:20.0.0.306
Adobe » Flash Player » Version: 21.0.0.216

cpe:2.3:a:adobe:flash_player:21.0.0.216
Adobe » Flash Player » Version: 21.0.0.241

cpe:2.3:a:adobe:flash_player:21.0.0.241
Adobe » Flash Player » Version: 21.0.0.242

cpe:2.3:a:adobe:flash_player:21.0.0.242
Adobe » Flash Player » Version: 21.0.0.97

cpe:2.3:a:adobe:flash_player:21.0.0.97
Adobe » Flash Player » Version: 22.0.0.192

cpe:2.3:a:adobe:flash_player:22.0.0.192
Adobe » Flash Player » Version: 22.0.0.211

cpe:2.3:a:adobe:flash_player:22.0.0.211
Adobe » Flash Player » Version: 23.0

cpe:2.3:a:adobe:flash_player:23.0
Adobe » Flash Player » Version: 23.0.0.162

cpe:2.3:a:adobe:flash_player:23.0.0.162
Adobe » Flash Player » Version: 23.0.0.185

cpe:2.3:a:adobe:flash_player:23.0.0.185
Adobe » Flash Player » Version: 23.0.0.205

cpe:2.3:a:adobe:flash_player:23.0.0.205
Adobe » Flash Player » Version: 23.0.0.207

cpe:2.3:a:adobe:flash_player:23.0.0.207
Adobe » Flash Player » Version: 23.0.0.257

cpe:2.3:a:adobe:flash_player:23.0.0.257
Adobe » Flash Player » Version: 24.0.0.186

cpe:2.3:a:adobe:flash_player:24.0.0.186
Adobe » Flash Player » Version: 24.0.0.194

cpe:2.3:a:adobe:flash_player:24.0.0.194
Adobe » Flash Player Desktop Runtime » Version: 16.0.0.287

cpe:2.3:a:adobe:flash_player_desktop_runtime:16.0.0.287
Adobe » Flash Player Desktop Runtime » Version: 18.0

cpe:2.3:a:adobe:flash_player_desktop_runtime:18.0
Adobe » Flash Player Desktop Runtime » Version: 18.0.0.203

cpe:2.3:a:adobe:flash_player_desktop_runtime:18.0.0.203
Adobe » Flash Player Desktop Runtime » Version: 21.0.0.226

cpe:2.3:a:adobe:flash_player_desktop_runtime:21.0.0.226
Adobe » Flash Player Desktop Runtime » Version: 23.0.0.162

cpe:2.3:a:adobe:flash_player_desktop_runtime:23.0.0.162
Apple » Mac Os X » Version: N/A

cpe:2.3:o:apple:mac_os_x:-
Google » Chrome Os » Version: N/A

cpe:2.3:o:google:chrome_os:-
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-
Microsoft » Windows » Version: N/A

cpe:2.3:o:microsoft:windows:-
Microsoft » Windows 10 » Version: N/A

cpe:2.3:o:microsoft:windows_10:-
Microsoft » Windows 8.1 » Version: N/A

cpe:2.3:o:microsoft:windows_8.1:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-2995

Products

Pricing

Contact Us