CVE-2010-2884

CVE-2010-2884 is a critical-severity vulnerability in Adobe Flash Player with a CVSS 2.0 base score of 9.3. Its EPSS exploit-prediction score of 16% places it in the 96th percentile, indicating an elevated likelihood of exploitation.

Key facts

Description

Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010.

Frequently asked questions

What is CVE-2010-2884?
Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010.
How severe is CVE-2010-2884?
CVE-2010-2884 has a CVSS 2.0 base score of 9.3, rated critical severity.
Is CVE-2010-2884 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 16% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2010-2884?
CVE-2010-2884 primarily affects Adobe Flash Player. In total, 160 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2010-2884?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2010-2884 published?
CVE-2010-2884 was published on 2010-09-15 and last updated on 2026-06-16.

References

Affected products (160)

More vulnerabilities in Adobe Flash Player

All CVEs affecting Adobe Flash Player →