CVE-2010-3976
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1...
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.
- Record
CVE-2010-3976- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.
- Record
CVE-2010-3976- Updated
- 2026-11-02
EUVDEUVD-2010-3953 No score
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.
- Record
EUVD-2010-3953- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-84w5-gxxj-77r2 No score
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1...
Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.
- Record
GHSA-84w5-gxxj-77r2- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3976 is a high vulnerability (CVSS 9.3) in Adobe Flash Player, published October 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.29%, the 95th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2011/0192
securityfocus.com/archive/1/514653/100/0/threaded
support.apple.com/kb/HT4435
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6926
core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bflash_player%5D_10.1.x_insecure_dll_hijacking_%28dwmapi.dll%29
secunia.com/advisories/43026
Show 11 moreShow less
security.gentoo.org/glsa/glsa-201101-09.xml
lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
acrossecurity.com/aspr/ASPR-2010-11-05-1-PUB.txt
lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
marc.info?l=bugtraq&m=130331642631603&w=2
adobe.com/support/security/bulletins/apsb10-26.html
derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-09/msg00070.html
nvd.nist.gov/vuln/detail/CVE-2010-3976
github.com/advisories/GHSA-84w5-gxxj-77r2