Adobe Warns of Critical Flaw in Flash, Acrobat & Reader
Summary: Adobe warned that a previously unknown vulnerability in Flash Player 10.0.45.2 and earlier, plus the authplay.dll component of Adobe Reader and Acrobat 9.x, was being actively exploited in the wild. Adobe said Flash Player 10.1 Release Candidate and Reader/Acrobat 8.x were not vulnerable, planned a Flash patch for June 10 and a Reader/Acrobat update for June 29, and Symantec reported one exploit strain, Trojan.Pidief.J, a PDF that drops a backdoor.
What you should know: Symantec noted the attacks were targeted and limited but expected criminal groups to adopt the flaw, and Reader and Acrobat users faced a three-week gap between the June 10 Flash fix and the June 29 Reader/Acrobat update, with deleting or renaming authplay.dll as the interim mitigation.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026