Critical Flash Player Update Plugs 11 Holes
Summary: Adobe released a critical Flash Player update fixing at least 11 vulnerabilities, including CVE-2011-0627, which Adobe said was being targeted in the wild via a .swf file embedded in a Word or Excel attachment emailed to Windows users, though Adobe had not obtained a sample that completed an attack. The flaws affect Flash 10.2.159.1 and earlier on Windows, Mac, Linux and Solaris, with the new version at 10.3.181.14 for most platforms and 10.3.185.21 for Android.
Bottom line: The exploit arrived as an ordinary Word or Excel attachment, so the document itself was the attack path, and Adobe had no working sample in hand to confirm how far it got.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2011-0627
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026