VULNERABILITY INTELLIGENCE

CVE-2010-4092

CVSS score9.3 HIGH
EPSS probability5.45%
CISA KEVNot currently listed
Published2010-11-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player before 11.5.9.620 allows user-assisted remote attackers to execute arbitrary code via a crafted web site, related to the Shockwave Settings window and an unloaded library. NOTE: some of these details are obtained from third party information.

Primary references