CVE-2017-3080

Published: Jul 17, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure.

Affected (4)

Products: Adobe: Flash Player Desktop Runtime, Flash Player

Adobe

2 products

Flash Player Desktop Runtime

Flash Player

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Adobe Flash Player Desktop Runtime	Up to 26.0.0.131

Configuration B

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Up to 26.0.0.120
Adobe Flash Player	Up to 26.0.0.120

Running on/with	Platform Versions
Microsoft Windows 10	All versions
Microsoft Windows 8.1	All versions

Configuration C

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Up to 26.0.0.131

Running on/with	Platform Versions
Apple Mac Os X	All versions
Google Chrome Os	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

References (10)

http://www.securityfocus.com/bid/99519

Source: psirt@adobe.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038845

Source: psirt@adobe.com

Broken LinkThird Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2017:1731

Source: psirt@adobe.com

Third Party Advisory

https://helpx.adobe.com/security/products/flash-player/apsb17-21.html

Source: psirt@adobe.com

PatchVendor Advisory

https://security.gentoo.org/glsa/201707-15

Source: psirt@adobe.com

Third Party Advisory

http://www.securityfocus.com/bid/99519