Adobe Pushes Critical Flash Patch
Summary: Adobe released its second Flash Player security update of November 2014, moving Windows and Mac desktop users to v. 15.0.0.239 and Linux users to v. 11.2.202.424. The update adds hardening against CVE-2014-8439, a flaw Adobe fixed in October 2014 that F-Secure reported was being exploited in the wild by an exploit kit after researcher Kafeine flagged it.
What's compelling: An exploit kit was already using this flaw against hacked websites before the patch landed, and Windows users browsing with anything other than Internet Explorer may need to apply the patch twice - once in IE and again in the alternative browser.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2014-8439
- Related
- CVE-2014-8439: Adobe Flash Player Dereferenced Pointer Vulnerability Known Exploited Vulnerabilities · May 25, 2022Flash 0-day Exploited by Angler Exploit Kit Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026