Critical Flash Update Fixes Zero-day Flaw
Summary: Adobe issued a Flash Player update fixing a critical vulnerability, CVE-2012-0779, that malicious actors have used in targeted attacks delivering a malicious file through an email message. The exploit seen so far targets Flash Player on Internet Explorer for Windows only, and Adobe urged users of Flash Player 11.2.202.233 and earlier for Windows, Macintosh and Linux to update to 11.2.202.235, with separate updates for Android 4.x and Android 3.x and earlier.
Key Takeaway: The flaw is rated critical because it can break into vulnerable machines without any help from users, and the attack arrives as an emailed file a recipient is tricked into clicking - so patching speed, not user caution, is the control that matters.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2012-0779
- Related
- Multiple Human Rights, Foreign Policy Sites Hacked Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026