CVE-2010-2186: Adobe Air

High severity, CVSS 9.3. EPSS: 6.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.

Affected products

• Adobe Air: up to and including 1.5.3.9130; version 1.0 only; version 1.1 only; version 1.5 only; version 1.5.1 only; version 1.5.2 only; …
• Adobe Flash Player: version 9.0.16 only; version 9.0.20 only; version 9.0.20.0 only; version 9.0.28 only; version 9.0.28.0 only; version 9.0.31 only; …
• Macromedia Flash Player: version 5.0 only; version 5.0.30.0 only; version 5.0.41.0 only; version 5.0.42.0 only; version 5.0.58.0 only

Published 2010-06-15. Last modified 2026-06-16.