CVE-2009-1867: Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attacker...

Security readout for executives and security teams

This is a legacy Adobe Flash Player and Adobe AIR clickjacking issue. A malicious page could mislead a user into clicking a link or completing a dialog they did not intend. Business urgency depends on whether old Flash or AIR versions still exist in the environment. Exposure is most likely on legacy endpoints, kiosks, embedded systems, or archived application stacks that still include the affected Flash Player or AIR versions. The source bundle does not identify affected CPEs beyond the product/version text. Treat this as a legacy exposure cleanup item unless old Flash or AIR is still business-critical. Prioritize affected internet-facing, kiosk, or shared-user systems because the issue depends on convincing a user to interact with deceptive content. Mitigation focus: Inventory systems for Adobe Flash Player and Adobe AIR versions.; Upgrade Flash Player to 9.0.246.0, 10.0.32.18, or later where applicable.; Upgrade Adobe AIR to 1.5.2 or later where applicable..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.