Skip to main content
CVE-2016-1010VulnerabilityPublished 05/25/2022Updated 10/24/2026

CVE-2016-1010: Adobe Flash Player and AIR Integer Overflow Vulnerability

Affects Adobe Flash Player and AIRSource CISA KEV

Severity
High

No CVSS score published yet

Exploitation

Actively exploited – in CISA KEV since 05/25/2022

KEV deadline
06/15/2022
EPSS
19.3% chance of exploitation in 30 days – higher than 97% of CVEs

What to do

CISA required action

The impacted products are end-of-life and should be disconnected if still in use.

Description

CVE-2016-1010 is an integer overflow vulnerability in Adobe Flash Player and AIR that allows attackers to execute arbitrary code. This vulnerability has been exploited in the wild. It affects Adobe Flash Player and AIR products, but specific affected versions are not provided. The severity is high due to the potential for code execution.

Weaknesses

References

Track Adobe Flash Player and AIR with alerts and the API. See plans

Added 10/24/2026 · analysed 10/24/2026 · updated 10/24/2026