CVE-2010-0378

8.8 highEPSS 6.2%

Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 6.2% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2010-01-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

adobe:flash_player

References

http://secunia.com/advisories/27105
http://secunia.com/secunia_research/2007-77/
http://securitytracker.com/id?1023435
http://www.kb.cert.org/vuls/id/204889
http://www.microsoft.com/technet/security/advisory/979267.mspx

Check your stack JSON