CVE-2010-3765

public exploits

Public exploit code: 4 on Exploit-DB · 1 Metasploit module

Listed so you can judge urgency, not as a recommendation to run anything. GitHub “proofs of concept” are unvetted: some are fake or carry malware. Exploit-DB marks the entries its staff verified.

cisa ssvc

exploitation

active

automatable

yes

technical impact

total

Assessed by CISA 4 Oct 2025 (SSVC 2.0.3).

timeline

1. 28 Oct 2010First public exploit or proof of concept
2. 28 Oct 2010Published · same day later
3. 4 Oct 2025CISA SSVC assessment: exploitation active · 5,455 days (about 15 years) later
4. 6 Oct 2025Added to CISA KEV (exploited in the wild) · 2 days later
5. 22 Oct 2025CVE record last updated · 16 days later
6. 27 Oct 2025CISA remediation due date (US federal agencies) · 5 days later
7. 2 Nov 2026Analysed by vulneraibility.com · 372 days (about 1 year) later