CVE-2010-0378: Adobe Flash Player

High severity, CVSS 8.8. EPSS: 6.2% chance of exploitation in the next 30 days.

Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."

Affected products

• Adobe Flash Player: version 6.0.79 only

Published 2010-01-21. Last modified 2026-06-16.