Security Fix for Critical Adobe Flash Flaw
Summary: Adobe released an emergency Flash Player update to fix a critical vulnerability that attackers were already exploiting, moving Windows, Macintosh, Linux, and Solaris users from version 10.1.82.76 and earlier to 10.1.85.3, and Android users from 10.1.92.10 to 10.1.95.1. The same flaw exists in current versions of Adobe Reader and Acrobat, which Adobe said it would not patch until the week of October 4.
Why it matters: The flaw was being actively exploited before a fix existed, and Reader and Acrobat users were left exposed for roughly two more weeks; Krebs also notes Adobe was approaching the number of vulnerabilities Microsoft had fixed that year, with a patch list running from January through September.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026