cbcvebase.
CVE-2010-3649
published 2010-11-07

CVE-2010-3649: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on…

PriorityP345critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
5.21%
91.6th percentile
Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3650, and CVE-2010-3652.

Affected

4 ranges
VendorProductVersion rangeFixed in
adobeflash_player<= 10.1.95.1
adobeflash_player>= 10.0 < 10.1.102.6410.1.102.64
adobeflash_player>= 10.0.12.36 < 10.1.102.6410.1.102.64
adobeflash_player>= 9.0 < 9.0.289.09.0.289.0

CVSS provenance

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat9.3CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.