CVE-2010-2884

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-09-15 · updated 2026-06-16

Description

Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010.

Affected products

Adobe Acrobat for Edge: through 9.3.4; 3.0, 3.1, 4.0, 4.0.5, 4.0.5a, 4.0.5c (+49)
Adobe Acrobat Reader: through 9.3.4; 3.0, 3.01, 3.02, 4.0, 4.0.5, 4.0.5a (+49)
Adobe Flash Player 24.0.0.186 and earlier.: through 10.1.82.76; through 10.1.92.10; 7.0, 7.0.1, 7.0.25, 7.0.63, 7.0.69.0, 7.0.70.0 (+41)

References

Get alerted when CVE-2010-2884 or the next vulnerability affects your stack