ByteOS

Product

tvOS

Versions

Affected

From unspecified before 16.6 (custom)

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 16.6 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 13.5 (custom)

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 15.7 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 11.7 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 12.6 (custom)

Vendor

Product

watchOS

Versions

Affected

From unspecified before 9.6 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	A remote user may be able to cause unexpected system termination or corrupt kernel memory

Type: N/A

CWE ID: N/A

Description: A remote user may be able to cause unexpected system termination or corrupt kernel memory

References

Hyperlink	Resource
https://support.apple.com/en-us/HT213846	N/A
https://support.apple.com/en-us/HT213841	N/A
https://support.apple.com/en-us/HT213843	N/A
https://support.apple.com/en-us/HT213842	N/A
https://support.apple.com/en-us/HT213845	N/A
https://support.apple.com/en-us/HT213844	N/A
https://support.apple.com/en-us/HT213848	N/A
https://support.apple.com/kb/HT213843	N/A
https://support.apple.com/kb/HT213844	N/A
https://support.apple.com/kb/HT213841	N/A
https://support.apple.com/kb/HT213845	N/A
https://support.apple.com/kb/HT213846	N/A
https://support.apple.com/kb/HT213842	N/A
https://support.apple.com/kb/HT213848	N/A

Hyperlink: https://support.apple.com/en-us/HT213846

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213841

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213843

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213842

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213845

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213844

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213848

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT213843

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT213844

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT213841

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT213845

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT213846

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT213842

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT213848

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT213846	x_transferred
https://support.apple.com/en-us/HT213841	x_transferred
https://support.apple.com/en-us/HT213843	x_transferred
https://support.apple.com/en-us/HT213842	x_transferred
https://support.apple.com/en-us/HT213845	x_transferred
https://support.apple.com/en-us/HT213844	x_transferred
https://support.apple.com/en-us/HT213848	x_transferred
https://support.apple.com/kb/HT213843	x_transferred
https://support.apple.com/kb/HT213844	x_transferred
https://support.apple.com/kb/HT213841	x_transferred
https://support.apple.com/kb/HT213845	x_transferred
https://support.apple.com/kb/HT213846	x_transferred
https://support.apple.com/kb/HT213842	x_transferred
https://support.apple.com/kb/HT213848	x_transferred

Hyperlink: https://support.apple.com/en-us/HT213846

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213841

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213843

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213842

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213845

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213844

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213848

Resource:

x_transferred

Hyperlink: https://support.apple.com/kb/HT213843

Resource:

x_transferred

Hyperlink: https://support.apple.com/kb/HT213844

Resource:

x_transferred

Hyperlink: https://support.apple.com/kb/HT213841

Resource:

x_transferred

Hyperlink: https://support.apple.com/kb/HT213845

Resource:

x_transferred

Hyperlink: https://support.apple.com/kb/HT213846

Resource:

x_transferred

Hyperlink: https://support.apple.com/kb/HT213842

Resource:

x_transferred

Hyperlink: https://support.apple.com/kb/HT213848

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:28 Jul, 2023 | 05:15

Updated At:03 Aug, 2023 | 16:55

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions before 15.7.8(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions from 16.0(inclusive) to 16.6(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions before 15.7.8(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions from 16.0(inclusive) to 16.6(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions before 11.7.9(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 12.0(inclusive) to 12.6.8(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 13.0(inclusive) to 13.5(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

>>tvos>>Versions before 16.6(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

>>watchos>>Versions before 9.6(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.apple.com/en-us/HT213841	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT213842	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT213843	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT213844	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT213845	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT213846	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT213848	product-security@apple.com	Vendor Advisory
https://support.apple.com/kb/HT213841	product-security@apple.com	Vendor Advisory
https://support.apple.com/kb/HT213842	product-security@apple.com	Vendor Advisory
https://support.apple.com/kb/HT213843	product-security@apple.com	Vendor Advisory
https://support.apple.com/kb/HT213844	product-security@apple.com	Vendor Advisory
https://support.apple.com/kb/HT213845	product-security@apple.com	Vendor Advisory
https://support.apple.com/kb/HT213846	product-security@apple.com	Vendor Advisory
https://support.apple.com/kb/HT213848	product-security@apple.com	Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213841

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213842

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213843

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213844

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213845

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213846

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213848

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213841

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213842

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213843

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213844

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213845

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213846

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213848

Source: product-security@apple.com

Resource:

Vendor Advisory

Similar CVEs

886Records found

CVE-2021-30934

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.39% / 79.60%

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Debian GNU/Linux Fedora Project Apple Inc.

Product-iphone_os debian_linux ipados tvos watchos safari fedora macos watchOS macOS iOS and iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30707

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.20% / 78.11%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:27

Updated-03 Aug, 2024 | 22:40

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted audio file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos macOS iOS and iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30889

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.68% / 70.73%

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:49

Updated-03 Aug, 2024 | 22:48

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos macOS iOS and iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-4582

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-8.8||HIGH

EPSS-0.62% / 68.98%

7 Day CHG~0.00%

Published-11 Sep, 2023 | 08:01

Updated-19 Sep, 2024 | 20:35

Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occured when allocating too much private shader memory on mac OS. *This bug only affects Firefox on macOS. Other operating systems are unaffected.* This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.

Vendor-Mozilla Corporation Apple Inc.

Product-firefox thunderbird macos firefox_esr Firefox Firefox ESR Thunderbird firefox thunderbird firefox_esr

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2015-0973

Matching Score-10

Assigner-CERT/CC

Matching Score-10

Assigner-CERT/CC

CVSS Score-8.8||HIGH

EPSS-2.01% / 82.94%

7 Day CHG+1.21%

Published-18 Jan, 2015 | 18:00

Updated-09 Jun, 2025 | 16:15

Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.

Vendor-libpng n/a Oracle Corporation Apple Inc.

Product-mac_os_x solaris libpng n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-6201

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.88% / 74.45%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 20:16

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-54505

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.34% / 56.07%

7 Day CHG+0.05%

Published-11 Dec, 2024 | 22:58

Updated-21 Dec, 2024 | 04:56

A type confusion issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari visionos macos watchOS Safari macOS iPadOS visionOS tvOS iOS and iPadOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2017-5077

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.91% / 74.89%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-125

Out-of-bounds Read

CVE-2017-5073

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.91% / 74.89%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-416

Use After Free

CVE-2017-5114

Matching Score-8

Assigner-Chrome

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.48% / 80.23%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows debian_linux enterprise_linux_server macos android Google Chrome prior to 61.0.3163.79 for Linux, Windows and Mac, and 61.0.3163.81 for Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-5057

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.84% / 73.75%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2017-5088

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 59.0.3071.104 for Mac, Windows and Linux, and 59.0.3071.117 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.91% / 74.89%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-125

Out-of-bounds Read

CVE-2017-5030

Matching Score-8

Assigner-Chrome

Vendor-n/a Microsoft Corporation Apple Inc.Red Hat, Inc.Google LLC Linux Kernel Organization, Inc Debian GNU/Linux

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-63.05% / 98.32%

7 Day CHG~0.00%

Published-24 Apr, 2017 | 23:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows debian_linux enterprise_linux_server macos android Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and 57.0.2987.108 for Android Chromium V8

CWE ID-CWE-125

Out-of-bounds Read

CVE-2017-5091

Matching Score-8

Assigner-Chrome

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.10% / 77.10%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CWE ID-CWE-416

Use After Free

CVE-2017-5108

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.84% / 73.75%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2017-5062

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.98% / 75.88%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform out of bounds memory access via a crafted Chrome extension.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-416

Use After Free

CVE-2017-5054

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.54% / 66.73%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-125

Out-of-bounds Read

CVE-2017-5095

Matching Score-8

Assigner-Chrome

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.59% / 80.88%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file.

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel debian_linux enterprise_linux_server macos windows Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-5059

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-2.49% / 84.70%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code execution via a crafted HTML page.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2017-5111

Matching Score-8

Assigner-Chrome

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.48% / 80.23%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel enterprise_linux_server debian_linux macos windows Google Chrome prior to 61.0.3163.79 for Linux, Windows and Mac

CWE ID-CWE-416

Use After Free

CVE-2017-5121

Matching Score-8

Assigner-Chrome

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-3.64% / 87.38%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel debian_linux enterprise_linux_server macos windows Google Chrome prior to 61.0.3163.100 for Linux, Windows and Mac

CWE ID-CWE-20

Improper Input Validation

CVE-2017-5098

Matching Score-8

Assigner-Chrome

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-3.37% / 86.85%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CWE ID-CWE-416

Use After Free

CVE-2017-5113

Matching Score-8

Assigner-Chrome

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.26% / 78.61%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows debian_linux enterprise_linux_server macos android Google Chrome prior to 61.0.3163.79 for Mac, Windows and Linux, and 61.0.3163.81 for Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-5063

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.91% / 74.89%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2017-3071

Matching Score-8

Matching Score-8

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-8.8||HIGH

EPSS-1.65% / 81.23%

7 Day CHG~0.00%

Published-09 May, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects. Successful exploitation could lead to arbitrary code execution.

Product-enterprise_linux_desktop chrome_os enterprise_linux_workstation linux_kernel flash_player_desktop_runtime windows_8.1 windows enterprise_linux windows_10 flash_player mac_os_x Adobe Flash Player 25.0.0.148 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-2987

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.89% / 87.79%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2017-2936

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.58% / 80.83%

7 Day CHG~0.00%

Published-11 Jan, 2017 | 04:40

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 24.0.0.186 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-3002

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.14% / 77.53%

7 Day CHG~0.00%

Published-14 Mar, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.221 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-3070

Matching Score-8

Matching Score-8

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-8.8||HIGH

EPSS-1.97% / 82.77%

7 Day CHG~0.00%

Published-09 May, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation could lead to arbitrary code execution.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2986

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-34.47% / 96.85%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-3069

Matching Score-8

Matching Score-8

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-8.8||HIGH

EPSS-1.97% / 82.77%

7 Day CHG~0.00%

Published-09 May, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. Successful exploitation could lead to arbitrary code execution.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-3072

Matching Score-8

Matching Score-8

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-8.8||HIGH

EPSS-1.97% / 82.77%

7 Day CHG~0.00%

Published-09 May, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2996

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.17% / 77.77%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2994

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.99% / 82.86%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-2988

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-40.87% / 97.28%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2999

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.01% / 76.13%

7 Day CHG~0.00%

Published-14 Mar, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.221 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2995

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.72% / 88.96%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2017-2985

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-40.87% / 97.28%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-2990

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.24% / 78.44%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2925

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.06% / 76.74%

7 Day CHG~0.00%

Published-11 Jan, 2017 | 04:40

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 24.0.0.186 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2982

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.32% / 79.06%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-3003

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.15% / 83.57%

7 Day CHG~0.00%

Published-14 Mar, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.221 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-3001

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.14% / 77.53%

7 Day CHG~0.00%

Published-14 Mar, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.221 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-2933

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-34.47% / 96.85%

7 Day CHG~0.00%

Published-11 Jan, 2017 | 04:40

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 24.0.0.186 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2993

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.32% / 79.06%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-2927

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.31% / 78.95%

7 Day CHG~0.00%

Published-11 Jan, 2017 | 04:40

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 24.0.0.186 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2926

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.07% / 76.80%

7 Day CHG~0.00%

Published-11 Jan, 2017 | 04:40

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 24.0.0.186 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2932

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-40.87% / 97.28%

7 Day CHG~0.00%

Published-11 Jan, 2017 | 04:40

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 24.0.0.186 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-3099

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.86% / 82.30%

7 Day CHG~0.00%

Published-14 Jul, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 26.0.0.131 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2931

Matching Score-8

Matching Score-8