Evil-DB LogoEvil-DB
← All CVEs

CVE-2016-1010

high · 8.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

The impacted products are end-of-life and should be disconnected if still in use.

Added 2022-05-25Remediation due 2022-06-15

Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.

8.8
CVSS
19.3%
EPSS (exploit prob.)
97th
EPSS percentile
2016-03-12
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-190

Affected products

VendorProductAffected versions
adobeflash_player<= 20.0.0.306
applemac_os_xall versions
googlechrome_osall versions
linuxlinux_kernelall versions
microsoftwindowsall versions
adobeair<= 20.0.0.233
googleandroidall versions
adobeair_sdk<= 20.0.0.260
samsungx14j_firmwaret-ms14jakucb-1102.5
appleiphone_osall versions
applemac_os_xall versions
googleandroidall versions
microsoftwindowsall versions
adobeflash_player<= 11.2.202.569
linuxlinux_kernelall versions
adobeflash_player_desktop_runtime<= 20.2.2.306
applemac_os_xall versions
microsoftwindowsall versions
adobeflash_player<= 20.0.0.306
microsoftwindows_10all versions
adobeflash_player<= 20.0.0.306
microsoftwindows_10all versions
microsoftwindows_8.1all versions
adobeair_desktop_runtime<= 20.0.0.260
applemac_os_xall versions
microsoftwindowsall versions
adobeair_sdk_&_compiler<= 20.0.0.260
appleiphone_osall versions
applemac_os_xall versions
googleandroidall versions
microsoftwindowsall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-1010