Flash Player Patch Fixes Zero-Day Flaw
Summary: Adobe released an emergency security update for a cross-site scripting flaw in Flash Player version 10.3.181.16 and earlier for Windows, Macintosh, Linux and Solaris, warning it was being actively exploited in targeted email attacks that trick users into clicking a malicious link. Adobe recommends updating to version 10.3.181.22, or 10.3.181.23 on Internet Explorer, and said it was still investigating whether the flaw is exploitable in Adobe Reader and Acrobat X (10.0.2) and earlier 10.x and 9.x versions.
What's compelling: The flaw is already being used in targeted attacks, and because Windows XP ships with the Flash ActiveX control, every Windows XP user needs the update even if they never open Internet Explorer.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026