Skip to content

CVE-2016-1010 Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before...

HighCVSS 8.8 EPSS 19.3% CISA KEV added 2022-05-25 · due 2022-06-15 Exploited in the wild
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.

CISA Known Exploited Vulnerability

Date added
2022-05-25
Due date (FCEB)
2022-06-15
Ransomware use
Unknown

Required action

The impacted products are end-of-life and should be disconnected if still in use.

Affected products

ProductAffected versionsFixed in
Adobe flash player <= 20.0.0.306 No fix listed
Adobe flash player <= 11.2.202.569 No fix listed
Adobe air <= 20.0.0.233 No fix listed
Adobe air sdk <= 20.0.0.260 No fix listed
samsung x14j firmware = t-ms14jakucb-1102.5 No fix listed
Adobe flash player desktop runtime <= 20.2.2.306 No fix listed
Adobe air desktop runtime <= 20.0.0.260 No fix listed
Adobe air sdk compiler <= 20.0.0.260 No fix listed

References