Third Hacking Team Flash Zero-Day Found
Summary: Researchers found a third zero-day vulnerability in Adobe's Flash Player within a week, reported by Trend Micro as CVE-2015-5123, after hackers dumped documents stolen from Hacking Team, an Italian firm that sells exploits to governments. Adobe confirmed it is working on a patch for the two outstanding zero-day flaws exposed in the breach, and the article notes more Flash zero-days are likely to surface as a result.
Why it matters: Three Flash zero-days in one week, all surfacing from a single breach of a firm that sells exploits to governments, means the exploit pipeline feeding attacks on your users is being published in bulk - and Adobe was still patching two of the three when this was written.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2015-5123
- Related
- CVE-2015-5123: Adobe Flash Player Use-After-Free Vulnerability Known Exploited Vulnerabilities · Apr 13, 2022Attacking ECMAScript Engines with Redefinition Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026