CVE-2010-1297

CWE-787

Critical

91.6

RPS

Description

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

Source: NVD

CVSS: 7.8; High · v3.1
EPSS: 82.53%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since Jun 2022
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-787
Published: 8 Jun 2010; Last modified 21 Apr 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2010-1297

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2010-1297

Description

Signals

Get this score from the API