CVE-2010-3975: Adobe Flash Player

High severity, CVSS 9.3. EPSS: 6.7% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash.

Affected products

• Adobe Flash Player: version 9.0 only

Published 2010-10-19. Last modified 2026-06-16.