CVE-2017-3090

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-20 · updated 2026-06-17
Weakness: CWE-427

Description

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

Affected products

Adobe Digital Editions: through 4.5.4

References

http://www.securityfocus.com/bid/99024
http://www.securitytracker.com/id/1038658
https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html
http://www.securityfocus.com/bid/99024
http://www.securitytracker.com/id/1038658
https://helpx.adobe.com/security/products/Digital-Editions/apsb17-20.html

Get alerted when CVE-2017-3090 or the next vulnerability affects your stack