CVE-2010-0378

Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP...

8.8 High

Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

6.18%Down 56.2 points since Feb 4, 2022

What each source reports

NVD Score used 8.8

Record: CVE-2010-0378
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-416
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-0378
Updated: 2026-11-02

EUVDEUVD-2010-0409 No score

Record: EUVD-2010-0409
Updated: 2026-11-03

GitHub AdvisoriesGHSA-r859-p3hv-36hf 8.8

Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP...

Record: GHSA-r859-p3hv-36hf
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

Affected products

adobe flash player

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-0378 is a high vulnerability (CVSS 8.8) in Adobe Flash Player, published January 21, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.18%, the 93rd percentile. No source names a fixed version.