Versions of Adobe Flash Player prior to 27.0.0.130 are unpatched, and therefore affected by multiple vulnerabilities :
- An unspecified memory corruption flaw exists that is caused by input not being properly validated. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing specially crafted Flash content, to to corrupt memory and potentially execute arbitrary code. (CVE-2017-11281, CVE-2017-11282)