Critical Security Update for Adobe Flash Player
Summary: Adobe released Flash Player 11.2 to fix at least two critical vulnerabilities that could crash a system and potentially let an attacker take control of it, covering Flash Player 11.1.102.63 and earlier on Windows, Macintosh, Linux and Solaris and 11.1.111.7 and earlier on Android 3.x and 2.x. The release is the third Flash security update in six weeks and adds a Windows-only background updater that updates all browser instances at once, with Mac support still under development.
What's compelling: Three Flash updates in six weeks means patching cadence, not patch existence, is the exposure - and the new updater installs an Adobe Flash Player Update Service that users reported running hourly even after selecting never check for updates, with a separate scheduled task that must also be disabled.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026