Flash Player Update Fixes Critical Flaws
Summary: Adobe issued an out-of-band update for Flash Player covering Windows, Mac, Linux, Solaris and Android, fixing at least six security flaws including a cross-site scripting bug that is being exploited in the wild in targeted email attacks. The fix applies to Flash Player 10.3.183.7 and earlier on Windows, Mac, Linux and Solaris and Flash 10.3.186.6 on Android, with new versions at 10.3.183.10 and 10.3.186.7 respectively.
Bottom line: Adobe credits Google with reporting the actively exploited cross-site scripting flaw, which could let an attacker take actions on a user's behalf on any website or webmail provider once the user visits a malicious link - and the targeted organizations have not yet been named.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026