Adobe Flash Update Plugs 32 Security Holes
Summary: Adobe released Flash Player version 10.1 to fix a critical flaw that hackers were already exploiting, along with at least 31 other vulnerabilities in versions 10.0.45.2 and earlier. A working exploit for the flaw was included in the Metasploit penetration testing framework, and the same vulnerability was present in Adobe Reader and Acrobat, which Adobe said it would not fix until June 29.
Key Takeaway: A weaponized exploit was already public in Metasploit while the same flaw sat unpatched in Reader and Acrobat, leaving users of Adobe's free reader exposed until June 29.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026