CVE-2017-11215

N/A

Published: December 9, 2017 at 06:00 AM UTC

Updated: June 17, 2026 at 01:01 AM UTC

4 products affected across 2 vendorsEnterprise Linux DesktopEnterprise Linux ServerEnterprise Linux Workstation· also runs on 6 platforms

Using Adobe Flash Player 27.0.0.183 and earlier versions by N/A?

Get instant alerts when new vulnerabilities affect Adobe Flash Player 27.0.0.183 and earlier versions - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 6%

Description

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Flash Player · Adobe

95%

v ≤ 27.0.0.18327.0.0.183

apple-macos (environment) · google-chrome-os (environment) · linux-linux-kernel (environment) · microsoft-windows (environment) · microsoft-windows-10 (environment) · microsoft-windows-8-1 (environment)

Enterprise Linux Desktop · Red Hatrubygems

95%

6.0

Enterprise Linux Server · Red Hatrubygems

95%

6.0

Enterprise Linux Workstation · Red Hatrubygems

95%

6.0