CVE-2017-2932 is a critical use-after-free vulnerability in the ActionScript MovieClip class of Adobe Flash Player versions 24.0.0.186 and earlier, impacting products across Adobe, Apple, Google, Linux, and Microsoft. With a CVSS score of 8.8 (HIGH), it allows unauthenticated attackers to achieve arbitrary code execution through user interaction, posing a significant risk to confidentiality, integrity, and availability. While not listed on the KEV catalog, an ExploitDB entry (EDB-41609) confirms public exploit code availability, and the vulnerability has garnered substantial community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 24.0.0.186CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:* | ||
<= 24.0.0.186CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:* | ||
<= 24.0.0.186CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:* | ||
<= 24.0.0.186CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.