Skip to content
COOEY

FAIL › dossier

Flash Player and AIR

PRODUCT

· dossier confidence 50%

Adobe Flash Player and AIR was a discontinued multimedia platform that suffered from a relentless stream of critical and high-severity remote code execution vulnerabilities. Its end-of-life status in December 2020 means no security patches are issued, making any remaining installations a perpetual security liability.

Failure events
2
Zero-days
0
RCEs
2
On KEV
2
Critical
0
Worst shame
78
PROFILE
Categorymultimedia platformWhat they doAdobe Flash Player and AIR was a discontinued multimedia platform that delivered rich web content and desktop applications.
SECURITY POSTURE

Extremely poor; the product reached end-of-life in December 2020 with no further security updates, leaving all installations as perpetual security liabilities.

Notable failures
  • CVE-2016-1010 integer overflow RCE
  • CVE-2016-0984 use-after-free RCE actively exploited in the wild
Patterns: repeated critical and high-severity remote code execution vulnerabilities
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2022-05-25 CVE-2016-1010 high An integer overflow vulnerability in Adobe Flash Player and AIR allowed attackers to execute arbitrary code.
2022-05-25 CVE-2016-0984 high Adobe Flash Player and AIR contained a use-after-free vulnerability allowing remote code execution, which was actively exploited in the wild.
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-11 03:51:29.159409+00:00