Critical Flash Player Update Fixes 2 Zero-Days
Summary: Adobe released an emergency update fixing at least two zero-day Flash Player vulnerabilities that attackers were already exploiting in the wild. CVE-2013-0634 was exploited through malicious Flash content on websites targeting Firefox and Safari on Mac OS X and through Word documents emailed to Windows users, while CVE-2013-0633 targeted the ActiveX version of Flash Player on Windows via malicious Word attachments.
Why it matters: One exploit was built to drop malware on both Windows and Mac OS X systems, and the flaw was reported with help from the Shadowserver Foundation, MITRE Corporation, and Lockheed Martin's computer incident response team - a sign the attacks were aimed at high-value targets before a patch existed.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2013-0633CVE-2013-0634
- Related
- The never ending Exploit Kit shift - Bleeding Life Cyber Risks ·New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026