An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
| CVE | CVE-2017-11215 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 6.1% en 30 días (percentil 93) |
| CWE | CWE-416 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Productos afectados (catálogo NVD)
adobe/flash_playerapple/macosgoogle/chrome_oslinux/linux_kernelmicrosoft/windowsmicrosoft/windows_10microsoft/windows_8.1redhat/enterprise_linux_desktop