CVE-2017-11292
Adobe Flash Player Type Confusion Vulnerability
CVSS
—
No CVSS
EPSS
11.9%
p96
KEV
YES
Mar 3, 2022
Exploit Today
79
0-100
Published: — · Last modified: —
11.9%EPSS · 30 days11.9%
2026-09-172026-10-15
Product
Adobe / Flash Player
Vulnerability
Adobe Flash Player Type Confusion Vulnerability
Added to KEV
Mar 3, 2022
Remediate by
Mar 24, 2022
Known ransomware use
No
Summary description
Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2017-11292
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-159827.8 HIG99.8%
KEV—80Adobe Flash Player Use-After-Free Vulnerability14dCVE-2016-41179.8 CRI99.9%
KEV—80Adobe Flash Player Arbitrary Code Execution Vulnerability36dCVE-2016-10199.8 CRI97.7%
KEV—79Adobe Flash Player Arbitrary Code Execution Vulnerability14dCVE-2014-0497—100.0%
KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2015-3113—100.0%
KEV—80Adobe Flash Player Heap-Based Buffer Overflow Vulnerability—CVE-2011-0611—99.9%
KEV—80Adobe Flash Player Remote Code Execution Vulnerability—