CVE-2010-2215

medium

Published 2010-08-11 · Modified 2026-04-29

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

4.3

Description

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "click-jacking" issue.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact

Vendor	Product	Versions
adobe	adobe_air
adobe	adobe_air	`1.0`
adobe	adobe_air	`1.0.1`
adobe	adobe_air	`1.5`
adobe	adobe_air	`1.5.1`
adobe	adobe_air	`1.5.3`
adobe	adobe_air	`1.5.3.9120`
adobe	flash_player
adobe	flash_player	`7.0`
adobe	flash_player	`7.0.1`
adobe	flash_player	`7.0.25`
adobe	flash_player	`7.0.63`
adobe	flash_player	`7.1.1`
adobe	flash_player	`7.2`
adobe	flash_player	`8.0`
adobe	flash_player	`8.0.22.0`
adobe	flash_player	`8.0.33.0`
adobe	flash_player	`8.0.34.0`
adobe	flash_player	`8.0.35.0`
adobe	flash_player	`8.0.39.0`
adobe	flash_player	`8.0.42.0`
adobe	flash_player	`9.0`
adobe	flash_player	`9.0.16`
adobe	flash_player	`9.0.18d60`
adobe	flash_player	`9.0.20`
adobe	flash_player	`9.0.20.0`
adobe	flash_player	`9.0.28`
adobe	flash_player	`9.0.28.0`
adobe	flash_player	`9.0.31`
adobe	flash_player	`9.0.31.0`
adobe	flash_player	`9.0.45.0`
adobe	flash_player	`9.0.47.0`
adobe	flash_player	`9.0.48.0`
adobe	flash_player	`9.0.112.0`
adobe	flash_player	`9.0.114.0`
adobe	flash_player	`9.0.115.0`
adobe	flash_player	`9.0.124.0`
adobe	flash_player	`9.0.125.0`
adobe	flash_player	`9.0.151.0`
adobe	flash_player	`9.0.152.0`
adobe	flash_player	`9.0.159.0`
adobe	flash_player	`9.0.246.0`
adobe	flash_player	`9.0.260.0`
adobe	flash_player	`9.125.0`
adobe	flash_player	`10.0.0.584`
adobe	flash_player	`10.0.12.10`
adobe	flash_player	`10.0.12.36`
adobe	flash_player	`10.0.15.3`
adobe	flash_player	`10.0.22.87`
adobe	flash_player	`10.0.32.18`
adobe	flash_player	`10.0.42.34`
adobe	flash_player	`10.0.45.2`
adobe	flash_player	`10.1.52.14.1`
adobe	flash_player	`10.1.52.15`
adobe	flash_player_for_linux	`9.0.31`
adobe	flash_player_for_linux	`9.0.48.0`
adobe	flash_player_for_linux	`9.0.115.0`
adobe	flash_player_for_linux	`9.0.124.0`
adobe	flash_player_for_linux	`9.0.151.0`
adobe	flash_player_for_linux	`10.0.12.36`
adobe	flash_player_for_linux	`10.0.15.3`

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.