cbcvebase.
CVE-2010-3976
published 2010-10-19

CVE-2010-3976: Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote…

PriorityP346critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
9.29%
94.8th percentile
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.

Affected

41 ranges· showing 25
VendorProductVersion rangeFixed in
adobeflash_player<= 9.0.277.0—
adobeflash_player<= 10.1.92.10—
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.