CVE-2016-1010VulnerabilityPublished 05/25/2022Updated 10/24/2026
CVE-2016-1010: Adobe Flash Player and AIR Integer Overflow Vulnerability
Affects Adobe Flash Player and AIRSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 05/25/2022
- KEV deadline
- 06/15/2022
- EPSS
- 19.3% chance of exploitation in 30 days – higher than 97% of CVEs
What to do
CISA required action
The impacted products are end-of-life and should be disconnected if still in use.
Description
CVE-2016-1010 is an integer overflow vulnerability in Adobe Flash Player and AIR that allows attackers to execute arbitrary code. This vulnerability has been exploited in the wild. It affects Adobe Flash Player and AIR products, but specific affected versions are not provided. The severity is high due to the potential for code execution.