CVE-2009-1870: Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attacker...

Security readout for executives and security teams

CVE-2009-1870 is an Adobe Flash Player and Adobe AIR information disclosure issue. A vulnerable local sandbox behavior could let an attacker obtain sensitive information when an SWF file is saved to disk. The source bundle does not provide CVSS, detailed impact scope, or active exploitation evidence. Exposure is most likely on legacy endpoints, kiosks, embedded systems, or packaged applications that still include old Flash Player or Adobe AIR runtimes. Current exposure cannot be assumed from the bundle; inventory is required. Treat this as a legacy hygiene issue unless inventory shows vulnerable Flash or AIR remains in business-critical environments. If found, prioritize removal or upgrade because the affected software handles active content and the disclosed impact is sensitive information exposure. Mitigation focus: Upgrade Flash Player to 9.0.246.0, 10.0.32.18, or later where present.; Upgrade Adobe AIR to 1.5.2 or later where present.; Remove Flash Player and AIR where they are no longer required..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.