Time to Patch Your Flash

Summary: Adobe issued a critical Flash Player update to fix a vulnerability that criminals were actively exploiting, three weeks after rushing out a patch for a separate critical flaw. The new version moves users to Flash Player 10.2.159.1 (10.2.154.27 for Chrome users), and Adobe said a fix for the same flaw in Adobe Reader and Acrobat would not be available until the week of April 25, 2011.
Key Takeaway: The same flaw also sits in the Authplay.dll component shipped with Adobe Reader and Acrobat X (10.0.2) and earlier 10.x and 9.x versions, and that patch is at least 10 days out - so the actively exploited hole stays open in PDF readers after Flash is fixed.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026