Flash Player Patch Fixes 0-Day, 18 Other Flaws

Summary: Adobe released Flash Player version 20.0.0.267 for most Mac and Windows users to close at least 19 security holes, including CVE-2015-8651, which Adobe says is being exploited in limited, targeted attacks. Windows users browsing with anything other than Internet Explorer may need to apply the patch twice, once with IE and again using the alternative browser.
What you should know: One of the 19 flaws is already being used in active attacks, so anyone still running Flash carries a known-exploited vulnerability until the update is applied - and on some Windows setups a single update pass leaves the alternative browser unpatched.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2015-8651
Related: CVE-2015-8651: Adobe Flash Player Integer Overflow Vulnerability Known Exploited Vulnerabilities · May 25, 2022
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026