Adobe Flash Patch, Plus Shockwave Shocker
Summary: Adobe released a critical Flash Player update fixing nearly two-dozen security holes, with the latest version at 19.0.0.185 for Windows and Mac, and Adobe said it was unaware of any exploits in the wild for these flaws. Krebs also reported that the Shockwave Player version Adobe released two weeks earlier still bundled Flash runtime 16.0.0.305 from February 2015, leaving it missing fixes for 155 Flash vulnerabilities, including a half-dozen that had been actively exploited.
Key Takeaway: A media player Adobe shipped two weeks ago carries 155 unpatched Flash flaws, six of which attackers were already exploiting in the wild - so any machine running Shockwave is exposed through software its owner believes is current.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026