CVE-2017-3066 is a critical vulnerability that affects Adobe Flash Player. Discovered in February 2017, the vulnerability allows an attacker to remotely execute arbitrary code on a victim's computer by exploiting a use-after-free bug in the software. This means that an attacker can take control of a user's computer simply by getting them to visit a malicious website or clicking on a malicious link.
When the vulnerability was first discovered, Adobe issued a security advisory and released an update to address the issue. However, it wasn't until a few months later that the vulnerability started to be actively exploited in the wild. In April 2017, researchers at Proofpoint discovered a new exploit kit called "Seamless" that was using CVE-2017-3066 to deliver malware to victims' computers. The exploit kit was primarily used in targeted attacks against organizations in Russia and South Korea.
The discovery and exploitation of CVE-2017-3066 highlights the importance of keeping software up-to-date and being vigilant about potential security threats. Even though a patch had been released, many users failed to apply it, leaving their systems vulnerable to attack. Additionally, the targeted nature of the attacks shows that even seemingly minor vulnerabilities can be used as part of a larger attack campaign. As such, it is crucial that organizations have robust security measures in place to protect against both known and unknown threats.