← CVE Radar
CVE-2016-1010Adobe Flash Player and AIR Integer Overflow Vulnerability
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.
8.8 HIGHEPSS 19.33%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jun 15, 2022
The impacted products are end-of-life and should be disconnected if still in use.
Details
- CVE ID
- CVE-2016-1010
- Status
- Analyzed
- Assigner (CNA)
- adobe
- Published
- Mar 12, 2016
- Last modified
- 2026-06-17 00:41 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
adobeflash player2 version ranges
- through 20.0.0.306
- through 11.2.202.569
adobeair1 version range
- through 20.0.0.233
adobeair sdk1 version range
- through 20.0.0.260
samsungx14j firmware1 version range
- t-ms14jakucb-1102.5
adobeflash player desktop runtime1 version range
- through 20.2.2.306
adobeair desktop runtime1 version range
- through 20.0.0.260
adobeair sdk & compiler1 version range
- through 20.0.0.260
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00032.html
- securityfocus.com http://www.securityfocus.com/bid/84308
- securitytracker.com http://www.securitytracker.com/id/1035251
- helpx.adobe.com https://helpx.adobe.com/security/products/flash-player/apsb16-08.html
- security.gentoo.org https://security.gentoo.org/glsa/201603-07
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1010