PatchTheCVE: macromediahttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2010-3654: Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 1https://patchthecve.com/cve/CVE-2010-3654.htmlhttps://patchthecve.com/cve/CVE-2010-3654.htmlTue, 16 Jun 2026 23:23:15 +0000HIGH 9.3: Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or causeCVE-2010-2189: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when used inhttps://patchthecve.com/cve/CVE-2010-2189.htmlhttps://patchthecve.com/cve/CVE-2010-2189.htmlTue, 16 Jun 2026 23:20:15 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when used in conjunction with VMWare Tools on a VMWare platform, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.CVE-2010-2188: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2188.htmlhttps://patchthecve.com/cve/CVE-2010-2188.htmlTue, 16 Jun 2026 23:20:15 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the ActionScript native object 2200 connect method multiple times with different argumentsCVE-2010-2187: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2187.htmlhttps://patchthecve.com/cve/CVE-2010-2187.htmlTue, 16 Jun 2026 23:20:15 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2186: Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR befhttps://patchthecve.com/cve/CVE-2010-2186.htmlhttps://patchthecve.com/cve/CVE-2010-2186.htmlTue, 16 Jun 2026 23:20:15 +0000HIGH 9.3: Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.CVE-2010-2185: Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.https://patchthecve.com/cve/CVE-2010-2185.htmlhttps://patchthecve.com/cve/CVE-2010-2185.htmlTue, 16 Jun 2026 23:20:14 +0000HIGH 9.3: Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors.CVE-2010-2184: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2184.htmlhttps://patchthecve.com/cve/CVE-2010-2184.htmlTue, 16 Jun 2026 23:20:12 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2183: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2https://patchthecve.com/cve/CVE-2010-2183.htmlhttps://patchthecve.com/cve/CVE-2010-2183.htmlTue, 16 Jun 2026 23:20:12 +0000HIGH 9.3: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2181.CVE-2010-2182: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2182.htmlhttps://patchthecve.com/cve/CVE-2010-2182.htmlTue, 16 Jun 2026 23:20:12 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2181: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2https://patchthecve.com/cve/CVE-2010-2181.htmlhttps://patchthecve.com/cve/CVE-2010-2181.htmlTue, 16 Jun 2026 23:20:11 +0000HIGH 9.3: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2183.CVE-2010-2180: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2180.htmlhttps://patchthecve.com/cve/CVE-2010-2180.htmlTue, 16 Jun 2026 23:20:11 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2178: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2178.htmlhttps://patchthecve.com/cve/CVE-2010-2178.htmlTue, 16 Jun 2026 23:20:11 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2177: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2177.htmlhttps://patchthecve.com/cve/CVE-2010-2177.htmlTue, 16 Jun 2026 23:20:10 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2176: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2176.htmlhttps://patchthecve.com/cve/CVE-2010-2176.htmlTue, 16 Jun 2026 23:20:10 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2175: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2175.htmlhttps://patchthecve.com/cve/CVE-2010-2175.htmlTue, 16 Jun 2026 23:20:10 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2174: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow https://patchthecve.com/cve/CVE-2010-2174.htmlhttps://patchthecve.com/cve/CVE-2010-2174.htmlTue, 16 Jun 2026 23:20:10 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newfunction (0x44) operator, a different vulnerability than CVE-2010-2173.CVE-2010-2173: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow https://patchthecve.com/cve/CVE-2010-2173.htmlhttps://patchthecve.com/cve/CVE-2010-2173.htmlTue, 16 Jun 2026 23:20:10 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newclass (0x58) operator, a different vulnerability than CVE-2010-2174.CVE-2010-2171: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2171.htmlhttps://patchthecve.com/cve/CVE-2010-2171.htmlTue, 16 Jun 2026 23:20:08 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors related to SWF files, decompression of embedded JPEG image data, and the DefineBits and oCVE-2010-2170: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2https://patchthecve.com/cve/CVE-2010-2170.htmlhttps://patchthecve.com/cve/CVE-2010-2170.htmlTue, 16 Jun 2026 23:20:07 +0000HIGH 9.3: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2181 and CVE-2010-2183.CVE-2010-2169: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allow attackhttps://patchthecve.com/cve/CVE-2010-2169.htmlhttps://patchthecve.com/cve/CVE-2010-2169.htmlTue, 16 Jun 2026 23:20:07 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allow attackers to cause a denial of service (pointer memory corruption) or possibly execute arbitrary code via unspecified vectors.CVE-2010-2167: Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adhttps://patchthecve.com/cve/CVE-2010-2167.htmlhttps://patchthecve.com/cve/CVE-2010-2167.htmlTue, 16 Jun 2026 23:20:07 +0000HIGH 9.3: Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed (1) GIF or (2) JPEG data.CVE-2010-2166: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2166.htmlhttps://patchthecve.com/cve/CVE-2010-2166.htmlTue, 16 Jun 2026 23:20:07 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2171, CVE-2010-2165: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2165.htmlhttps://patchthecve.com/cve/CVE-2010-2165.htmlTue, 16 Jun 2026 23:20:06 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2166, CVE-2010-2171, CVE-2010-2164: Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR https://patchthecve.com/cve/CVE-2010-2164.htmlhttps://patchthecve.com/cve/CVE-2010-2164.htmlTue, 16 Jun 2026 23:20:06 +0000HIGH 9.3: Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unspecified "image type within a certain function."CVE-2010-2163: Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adhttps://patchthecve.com/cve/CVE-2010-2163.htmlhttps://patchthecve.com/cve/CVE-2010-2163.htmlTue, 16 Jun 2026 23:20:06 +0000HIGH 9.3: Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unknown vectors.CVE-2010-2162: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2162.htmlhttps://patchthecve.com/cve/CVE-2010-2162.htmlTue, 16 Jun 2026 23:20:06 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors related to improper length calculation and the (1) STSC, (2) STSZ, and (3) STCO atomCVE-2010-2161: Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.https://patchthecve.com/cve/CVE-2010-2161.htmlhttps://patchthecve.com/cve/CVE-2010-2161.htmlTue, 16 Jun 2026 23:20:06 +0000HIGH 9.3: Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."CVE-2010-2160: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attachttps://patchthecve.com/cve/CVE-2010-2160.htmlhttps://patchthecve.com/cve/CVE-2010-2160.htmlTue, 16 Jun 2026 23:20:05 +0000HIGH 9.3: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset in an unspecified undocumented opcode in ActionScript Virtual Machine 2, relateCVE-2009-3793: Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR befhttps://patchthecve.com/cve/CVE-2009-3793.htmlhttps://patchthecve.com/cve/CVE-2009-3793.htmlTue, 16 Jun 2026 23:12:21 +0000HIGH 9.3: Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute arbitrary code via unknown vectors.CVE-2007-1403: Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allhttps://patchthecve.com/cve/CVE-2007-1403.htmlhttps://patchthecve.com/cve/CVE-2007-1403.htmlTue, 16 Jun 2026 22:37:31 +0000HIGH 7.5: Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service (Internet Explorer 7 crash) and possibly execute arbitrary code via a long (1) BGCOLOR, (2) SRC, (3) AutoStart, (4) Sound, (5) DrawLogo, or (CVE-2006-6885: An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of servichttps://patchthecve.com/cve/CVE-2006-6885.htmlhttps://patchthecve.com/cve/CVE-2006-6885.htmlTue, 16 Jun 2026 22:33:59 +0000MEDIUM 4.3: An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the swURL attribute.CVE-2006-6827: Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crhttps://patchthecve.com/cve/CVE-2006-6827.htmlhttps://patchthecve.com/cve/CVE-2006-6827.htmlTue, 16 Jun 2026 22:33:52 +0000MEDIUM 5.0: Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the Flash8b.AllowScriptAccess method.