CVE-2010-2186: adobe air Code Injection
CVSS: 9.3v2.0HighModified
Published 15-06-2010Last modified 07-08-2024
Vulnerability summary
CVE-2010-2186 is a high (CVSS 9.3) Code Injection vulnerability in adobe air. EPSS estimates a 6.74% chance of exploitation in the next 30 days, higher than 93.8% of scored vulnerabilities.
CVSS score
9.3/10
010
High · v2.0 (NVD)EPSS score
6.74%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 15-06-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
CVSS metrics
1 score · 1 source · 1 versionHigh 9.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
6.74%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 6.74% on 19-09-2026
19-09-202619-10-2026
EPSS score6.74%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Adobe2 products
- air≤ 1.5.3.9130 | 1.0 | 1.1 | 1.5 | 1.5.1 | 1.5.2 | 1.5.3
- flash_player9.0.16 | 9.0.20 | 9.0.20.0 | 9.0.28 | 9.0.28.0 | 9.0.31 | 9.0.31.0 | 9.0.45.0 | 9.0.47.0 | 9.0.48.0 | 9.0.115.0 | 9.0.124.0 | 9.0.125.0 | 9.0.151.0 | 9.0.152.0 | 9.0.159.0 | 9.0.246.0 | 9.0.260.0 | 9.0.262.0 | ≤ 10.0.45.2 | 10.0.0.584 | 10.0.12.10 | 10.0.12.36 | 10.0.15.3 | 10.0.22.87 | 10.0.32.18 | 10.0.42.34 | 6.0.79 | 7.0 | 7.0.1 | 7.0.14.0 | 7.0.19.0 | 7.0.24.0 | 7.0.25 | 7.0.53.0 | 7.0.60.0 | 7.0.61.0 | 7.0.63 | 7.0.66.0 | 7.0.67.0 | 7.0.68.0 | 7.0.69.0 | 7.0.70.0 | 7.0.73.0 | 7.1 | 7.1.1 | 7.2 | 8.0 | 8.0.22.0 | 8.0.24.0 | 8.0.33.0 | 8.0.34.0 | 8.0.35.0 | 8.0.39.0 | 8.0.42.0
Macromedia1 product
- flash_player5.0 | 5.0.30.0 | 5.0.41.0 | 5.0.42.0 | 5.0.58.0
2 vendors · 3 products
References
29 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7118VDB EntrySignatureX Refsource OVAL
- support.apple.com/kb/HT4435X Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16285VDB EntrySignatureX Refsource OVAL
Show all 29 references
- www.us-cert.gov/cas/techalerts/TA10-162A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource