Adobe Ships Critical Fixes for Shockwave Player
Summary: Adobe released a critical update for Shockwave Player that fixes at least a half-dozen security holes, moving users from version 11.6.7.637 and earlier to 11.6.8.638 on Windows and Mac. Adobe said in its advisory that it is not aware of any active attacks against these flaws, and the update's test installation tried to include a pre-checked 30-day trial of Norton Internet Security.
Why it matters: The update arrives with a pre-checked Norton trial attached, so an install meant to close at least six holes can quietly add software you did not ask for. Adobe also notes Shockwave and Flash are separate products, and the latest Flash update from Oct. 8 fixes at least 25 security holes.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026