Emergency Patch for Adobe Flash Zero-Day
Summary: Adobe released an emergency update for Flash Player, version 18.0.0.194 on Windows and Mac OS X, fixing a critical flaw tracked as CVE-2015-3113 that the company said is being exploited in limited, targeted attacks. Adobe named Internet Explorer on Windows 7 and below, plus Firefox on Windows XP, as known targets of the exploits.
Bottom line: The vulnerability was already being used in attacks before a patch existed, and the affected targets were systems many organizations still ran, leaving the gap between disclosure and patching as the exposure window.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2015-3113
- Related
- CVE-2015-3113: Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Apr 13, 2022