CVE-2016-1010

Adobe Flash Player and AIR Integer Overflow Vulnerability

Adobe Flash Player and AIRApplications & CMS

CVSS

8.8High

ExploitationExploited in the wildAdded to KEV 25 May 2022CISA KEV

Exploit odds (EPSS)19.3%Chance of exploitation activity in the next 30 days, higher than 97% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version. Check the vendor advisory below

Federal deadline15 Jun 2022Remediation due date for US federal agenciesCISA KEV

CISA required actionThe impacted products are end-of-life and should be disconnected if still in use. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.

Text from CVE List