Adobe Ships Critical Shockwave Update
Summary: Adobe shipped an update fixing at least two critical flaws in Shockwave Player, affecting version 11.5.2.602 and earlier, with the patched version at 11.5.6.606 for Windows and Mac. Adobe recommended users uninstall the program and reboot before installing the update, and the article notes the latest secure Flash version is 10.0.42.34.
What's compelling: Adobe's own guidance was to remove Shockwave rather than patch it, and a Sophos senior security advisor advised the same on the grounds that few professional environments need it and removal reduces attack surface - leaving security leaders to decide how many endpoints still carry a player nobody can confirm they require.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026