Every CVE Search/ Get API key

CVE-2017-11225

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...

9.8 CriticalFix available

CVE-2017-11225 is a critical vulnerability (CVSS 9.8) in Adobe Flash Player, published November 16, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.08%, the 93rd percentile. Fixed in flash-player-plugin 27.0.0.187-1.mga5.nonfree.

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

6.08%Down 3.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

Record
CVE-2017-11225
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

Record
CVE-2017-11225
Updated
2026-11-02
EUVDEUVD-2017-2859 No score

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

Record
EUVD-2017-2859
Updated
2026-11-03
GitHub AdvisoriesGHSA-q7r5-p629-gmc5 9.8

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

Record
GHSA-q7r5-p629-gmc5
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVRHSA-2017:3222 8.8

Red Hat Security Advisory: flash-plugin security update

Record
RHSA-2017:3222
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-11225 9.8

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

Record
UBUNTU-CVE-2017-11225
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVMGASA-2017-0410 No score

Updated flash-player-plugin packages fixes security vulnerabilities

Adobe Flash Player 27.0.0.187 addresses critical vulnerabilities that could lead to code execution.

The update fixes out-of-bounds reads (CVE-2017-3112, CVE-2017-3114, CVE-2017-11213) and use-after-free issues (CVE-2017-11215, CVE-2017-11225).

Record
MGASA-2017-0410
Updated
2026-11-02
OSVMGASA-2018-0268 No score

Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 67.0.3396.62 fixes security issues:

Multiple flaws were found in the way Chromium 64.0.3282.140 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2017-11215, CVE-2017-11225, CVE-2018-6056, CVE-2018-6057, CVE-2018-6060, CVE-2018-6061, CVE-2018-6062, CVE-2018-6063, CVE-2018-6064, CVE-2018-6065, CVE-2018-6066, CVE-2018-6067, CVE-2018-6068, CVE-2018-6069, CVE-2018-6070, CVE-2018-6071, CVE-2018-6072, CVE-2018-6073, CVE-2018-6074, CVE-2018-6075, CVE-2018-6076, CVE-2018-6077, CVE-2018-6078, CVE-2018-6079, CVE-2018-6080, CVE-2018-6081, CVE-2018-6082, CVE-2018-6083, CVE-2018-6084, CVE-2018-6085, CVE-2018-6086, CVE-2018-6087, CVE-2018-6088, CVE-2018-6089, CVE-2018-6090, CVE-2018-6091, CVE-2018-6092, CVE-2018-6093, CVE-2018-6094, CVE-2018-6095, CVE-2018-6096, CVE-2018-6097, CVE-2018-6098, CVE-2018-6099, CVE-2018-6100, CVE-2018-6101, CVE-2018-6102, CVE-2018-6103, CVE-2018-6104, CVE-2018-6105, CVE-2018-6106, CVE-2018-6107, CVE-2018-6108, CVE-2018-6109, CVE-2018-6110, CVE-2018-6111, CVE-2018-6112, CVE-2018-6113, CVE-2018-6114, CVE-2018-6115, CVE-2018-6116, CVE-2018-6117, CVE-2018-6118, CVE-2018-6120, CVE-2018-6121, CVE-2018-6122, CVE-2018-6123, CVE-2018-6124, CVE-2018-6126, CVE-2018-6127, CVE-2018-6128, CVE-2018-6129, CVE-2018-6130, CVE-2018-6131, CVE-2018-6132, CVE-2018-6133, CVE-2018-6134, CVE-2018-6135, CVE-2018-6136, CVE-2018-6137, CVE-2018-6138, CVE-2018-6139, CVE-2018-6140, CVE-2018-6141, CVE-2018-6142, CVE-2018-6143, CVE-2018-6144, CVE-2018-6145, CVE-2018-6147)

Record
MGASA-2018-0268
Updated
2026-11-02
OSVopenSUSE-SU-2018:1175-1 No score

Security update for Chromium

This update for Chromium to version 66.0.3359.181 fixes the following issues:

  • CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  • CVE-2018-6085: Use after free in Disk Cache
  • CVE-2018-6086: Use after free in Disk Cache
  • CVE-2018-6087: Use after free in WebAssembly
  • CVE-2018-6088: Use after free in PDFium
  • CVE-2018-6089: Same origin policy bypass in Service Worker
  • CVE-2018-6090: Heap buffer overflow in Skia
  • CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  • CVE-2018-6092: Integer overflow in WebAssembly
  • CVE-2018-6093: Same origin bypass in Service Worker
  • CVE-2018-6094: Exploit hardening regression in Oilpan
  • CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  • CVE-2018-6096: Fullscreen UI spoof
  • CVE-2018-6097: Fullscreen UI spoof
  • CVE-2018-6098: URL spoof in Omnibox
  • CVE-2018-6099: CORS bypass in ServiceWorker
  • CVE-2018-6100: URL spoof in Omnibox
  • CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  • CVE-2018-6102: URL spoof in Omnibox
  • CVE-2018-6103: UI spoof in Permissions
  • CVE-2018-6104: URL spoof in Omnibox
  • CVE-2018-6105: URL spoof in Omnibox
  • CVE-2018-6106: Incorrect handling of promises in V8
  • CVE-2018-6107: URL spoof in Omnibox
  • CVE-2018-6108: URL spoof in Omnibox
  • CVE-2018-6109: Incorrect handling of files by FileAPI
  • CVE-2018-6110: Incorrect handling of plaintext files via file://
  • CVE-2018-6111: Heap-use-after-free in DevTools
  • CVE-2018-6112: Incorrect URL handling in DevTools
  • CVE-2018-6113: URL spoof in Navigation
  • CVE-2018-6114: CSP bypass
  • CVE-2018-6115: SmartScreen bypass in downloads
  • CVE-2018-6116: Incorrect low memory handling in WebAssembly
  • CVE-2018-6117: Confusing autofill settings
  • CVE-2017-11215: Use after free in Flash
  • CVE-2017-11225: Use after free in Flash
  • CVE-2018-6060: Use after free in Blink
  • CVE-2018-6061: Race condition in V8
  • CVE-2018-6062: Heap buffer overflow in Skia
  • CVE-2018-6057: Incorrect permissions on shared memory
  • CVE-2018-6063: Incorrect permissions on shared memory
  • CVE-2018-6064: Type confusion in V8
  • CVE-2018-6065: Integer overflow in V8
  • CVE-2018-6066: Same Origin Bypass via canvas
  • CVE-2018-6067: Buffer overflow in Skia
  • CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab
  • CVE-2018-6069: Stack buffer overflow in Skia
  • CVE-2018-6070: CSP bypass through extensions
  • CVE-2018-6071: Heap bufffer overflow in Skia
  • CVE-2018-6072: Integer overflow in PDFium
  • CVE-2018-6073: Heap bufffer overflow in WebGL
  • CVE-2018-6074: Mark-of-the-Web bypass
  • CVE-2018-6075: Overly permissive cross origin downloads
  • CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink
  • CVE-2018-6077: Timing attack using SVG filters
  • CVE-2018-6078: URL Spoof in OmniBox
  • CVE-2018-6079: Information disclosure via texture data in WebGL
  • CVE-2018-6080: Information disclosure in IPC call
  • CVE-2018-6081: XSS in interstitials
  • CVE-2018-6082: Circumvention of port blocking
  • CVE-2018-6083: Incorrect processing of AppManifests
  • CVE-2018-6121: Privilege Escalation in extensions
  • CVE-2018-6122: Type confusion in V8
  • CVE-2018-6120: Heap buffer overflow in PDFium
  • bsc#1086124: Various fixes from internal audits, fuzzing and other initiatives

This update also supports mitigation against the Spectre vulnerabilities:

'Strict site isolation' is disabled for most users and can be turned on via: chrome://flags/#enable-site-per-process

This feature is undergoing a small percentage trial. Out out of the trial is possible via: chrome://flags/#site-isolation-trial-opt-out

The following tracked packaging bug were fixed:

  • Chromium could not be installed from SUSE PackageHub 12 without having the SDK enabled (bsc#1070421)
  • Chromium could not be installed when libminizip1 was not available (bsc#1093031)
Record
openSUSE-SU-2018:1175-1
Updated
2026-11-02
OSVopenSUSE-SU-2018:1437-1 No score

Security update for Chromium

This update for Chromium to version 66.0.3359.181 fixes the following issues:

  • CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  • CVE-2018-6085: Use after free in Disk Cache
  • CVE-2018-6086: Use after free in Disk Cache
  • CVE-2018-6087: Use after free in WebAssembly
  • CVE-2018-6088: Use after free in PDFium
  • CVE-2018-6089: Same origin policy bypass in Service Worker
  • CVE-2018-6090: Heap buffer overflow in Skia
  • CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  • CVE-2018-6092: Integer overflow in WebAssembly
  • CVE-2018-6093: Same origin bypass in Service Worker
  • CVE-2018-6094: Exploit hardening regression in Oilpan
  • CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  • CVE-2018-6096: Fullscreen UI spoof
  • CVE-2018-6097: Fullscreen UI spoof
  • CVE-2018-6098: URL spoof in Omnibox
  • CVE-2018-6099: CORS bypass in ServiceWorker
  • CVE-2018-6100: URL spoof in Omnibox
  • CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  • CVE-2018-6102: URL spoof in Omnibox
  • CVE-2018-6103: UI spoof in Permissions
  • CVE-2018-6104: URL spoof in Omnibox
  • CVE-2018-6105: URL spoof in Omnibox
  • CVE-2018-6106: Incorrect handling of promises in V8
  • CVE-2018-6107: URL spoof in Omnibox
  • CVE-2018-6108: URL spoof in Omnibox
  • CVE-2018-6109: Incorrect handling of files by FileAPI
  • CVE-2018-6110: Incorrect handling of plaintext files via file://
  • CVE-2018-6111: Heap-use-after-free in DevTools
  • CVE-2018-6112: Incorrect URL handling in DevTools
  • CVE-2018-6113: URL spoof in Navigation
  • CVE-2018-6114: CSP bypass
  • CVE-2018-6115: SmartScreen bypass in downloads
  • CVE-2018-6116: Incorrect low memory handling in WebAssembly
  • CVE-2018-6117: Confusing autofill settings
  • CVE-2017-11215: Use after free in Flash
  • CVE-2017-11225: Use after free in Flash
  • CVE-2018-6060: Use after free in Blink
  • CVE-2018-6061: Race condition in V8
  • CVE-2018-6062: Heap buffer overflow in Skia
  • CVE-2018-6057: Incorrect permissions on shared memory
  • CVE-2018-6063: Incorrect permissions on shared memory
  • CVE-2018-6064: Type confusion in V8
  • CVE-2018-6065: Integer overflow in V8
  • CVE-2018-6066: Same Origin Bypass via canvas
  • CVE-2018-6067: Buffer overflow in Skia
  • CVE-2018-6068: Object lifecycle issues in Chrome Custom Tab
  • CVE-2018-6069: Stack buffer overflow in Skia
  • CVE-2018-6070: CSP bypass through extensions
  • CVE-2018-6071: Heap bufffer overflow in Skia
  • CVE-2018-6072: Integer overflow in PDFium
  • CVE-2018-6073: Heap bufffer overflow in WebGL
  • CVE-2018-6074: Mark-of-the-Web bypass
  • CVE-2018-6075: Overly permissive cross origin downloads
  • CVE-2018-6076: Incorrect handling of URL fragment identifiers in Blink
  • CVE-2018-6077: Timing attack using SVG filters
  • CVE-2018-6078: URL Spoof in OmniBox
  • CVE-2018-6079: Information disclosure via texture data in WebGL
  • CVE-2018-6080: Information disclosure in IPC call
  • CVE-2018-6081: XSS in interstitials
  • CVE-2018-6082: Circumvention of port blocking
  • CVE-2018-6083: Incorrect processing of AppManifests
  • CVE-2018-6121: Privilege Escalation in extensions
  • CVE-2018-6122: Type confusion in V8
  • CVE-2018-6120: Heap buffer overflow in PDFium
  • bsc#1086124: Various fixes from internal audits, fuzzing and other initiatives

This update also supports mitigation against the Spectre vulnerabilities:

'Strict site isolation' is disabled for most users and can be turned on via: chrome://flags/#enable-site-per-process

This feature is undergoing a small percentage trial. Out out of the trial is possible via: chrome://flags/#site-isolation-trial-opt-out

The following tracked packaging bug were fixed:

  • Chromium could not be installed from SUSE PackageHub 12 without having the SDK enabled (bsc#1070421)
  • Chromium could not be installed when libminizip1 was not available (bsc#1093031)
Record
openSUSE-SU-2018:1437-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score

chromedriver-93.0.4577.82-1.1 on GA media

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10681-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
flash-player-plugin
Mageia:5
 before 27.0.0.187-1.mga5.nonfree
27.0.0.187-1.mga5.nonfree
flash-player-plugin
Mageia:6
 before 27.0.0.187-1.mga6.nonfree
27.0.0.187-1.mga6.nonfree
chromium-browser-stable
Mageia:6
 before 67.0.3396.62-1.mga6
67.0.3396.62-1.mga6
flash-plugin
Red Hat:rhel_extras:6
 before 0:27.0.0.187-1.el6_9
0:27.0.0.187-1.el6_9
flashplugin-nonfree
Ubuntu:14.04:LTS
 before 27.0.0.187ubuntu0.14.04.1, plus listed versions
11.2.202.310ubuntu111.2.202.327ubuntu0.13.10.111.2.202.332ubuntu111.2.202.335ubuntu111.2.202.336ubuntu1
Show 45 moreShow less
11.2.202.341ubuntu111.2.202.346ubuntu111.2.202.350ubuntu111.2.202.356ubuntu0.14.04.111.2.202.359ubuntu0.14.04.111.2.202.378ubuntu0.14.04.111.2.202.394ubuntu0.14.04.111.2.202.400ubuntu0.14.04.111.2.202.406ubuntu0.14.04.111.2.202.406ubuntu0.14.04.211.2.202.411ubuntu0.14.04.111.2.202.418ubuntu0.14.04.111.2.202.424ubuntu0.14.04.111.2.202.425ubuntu0.14.04.111.2.202.429ubuntu0.14.04.111.2.202.438ubuntu0.14.04.111.2.202.440ubuntu0.14.04.111.2.202.442ubuntu0.14.04.111.2.202.451ubuntu0.14.04.111.2.202.457ubuntu0.14.04.111.2.202.460ubuntu0.14.04.111.2.202.466ubuntu0.14.04.111.2.202.468ubuntu0.14.04.111.2.202.481ubuntu0.14.04.111.2.202.481ubuntu0.14.04.211.2.202.491ubuntu0.14.04.111.2.202.508ubuntu0.14.04.111.2.202.521ubuntu0.14.04.111.2.202.535ubuntu0.14.04.111.2.202.540ubuntu0.14.04.211.2.202.548ubuntu0.14.04.111.2.202.554ubuntu0.14.04.111.2.202.559ubuntu0.14.04.111.2.202.569ubuntu0.14.04.111.2.202.577ubuntu0.14.04.111.2.202.616ubuntu0.14.04.111.2.202.621ubuntu0.14.04.111.2.202.626ubuntu0.14.04.111.2.202.632ubuntu0.14.04.111.2.202.635ubuntu0.14.04.111.2.202.637ubuntu0.14.04.111.2.202.643ubuntu0.14.04.111.2.202.644ubuntu0.14.04.124.0.0.186ubuntu0.14.04.124.0.0.194ubuntu0.14.04.1
27.0.0.187ubuntu0.14.04.1
flashplugin-nonfree
Ubuntu:16.04:LTS
 before 27.0.0.187ubuntu0.16.04.1, plus listed versions
11.2.202.540ubuntu211.2.202.548ubuntu111.2.202.554ubuntu111.2.202.559ubuntu111.2.202.569ubuntu1
Show 23 moreShow less
11.2.202.577ubuntu111.2.202.616ubuntu111.2.202.621ubuntu0.16.04.111.2.202.626ubuntu0.16.04.111.2.202.632ubuntu0.16.04.111.2.202.635ubuntu0.16.04.111.2.202.637ubuntu0.16.04.111.2.202.643ubuntu0.16.04.111.2.202.644ubuntu0.16.04.124.0.0.186ubuntu0.16.04.124.0.0.194ubuntu0.16.04.124.0.0.221ubuntu0.16.04.125.0.0.127ubuntu0.16.04.125.0.0.148ubuntu0.16.04.125.0.0.171ubuntu0.16.04.126.0.0.126ubuntu0.16.04.126.0.0.131ubuntu0.16.04.126.0.0.137ubuntu0.16.04.126.0.0.151ubuntu0.16.04.127.0.0.130ubuntu0.16.04.127.0.0.159ubuntu0.16.04.127.0.0.170ubuntu0.16.04.127.0.0.183ubuntu0.16.04.1
27.0.0.187ubuntu0.16.04.1
chromium
SUSE:Package Hub 12 SP2
 before 66.0.3359.181-55.1
66.0.3359.181-55.1
chromium
openSUSE:Tumbleweed
 before 93.0.4577.82-1.1
93.0.4577.82-1.1
chromium
openSUSE:Tumbleweed
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 12 versions and 2,158 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open