Critical Fixes for Shockwave, Firefox
Summary: Adobe released a critical Shockwave Player update fixing 11 security holes, most of which attackers could use remotely to take control of an affected system, bringing the program to version 11.5.9.615 for Mac and Windows. Adobe also warned that attackers were actively exploiting a previously unidentified critical flaw in Acrobat and PDF Reader 9.x, with a Flash fix planned by Nov. 9, 2010 and an Acrobat/Reader update the following week, while Mozilla shipped Firefox 3.6.12 to close a critical flaw already being used to attack users.
What you should know: Adobe said the Acrobat/Reader flaw was being actively exploited in the wild before a patch existed, and its own timeline put the Reader fix a week after the Flash fix - a window attackers could use against anyone still running Reader 9.x.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026