Tuesday, March 4, 2025
HomeCVE/vulnerabilityAdobe patches Multiple Security Flaw in Flash Player and Adobe Connect

Adobe patches Multiple Security Flaw in Flash Player and Adobe Connect

Published on

SIEM as a Service

Follow Us on Google News

Adobe releases patches for critical security flaws which allows attackers to control your system. This bundle applies for Windows, Macintosh, Linux and Chrome OS.

Flash Player Security Update – APSB17-21

These critical vulnerabilities affected Adobe Flash Player Desktop Runtime, Adobe Flash Player for Google Chrome running with versions of 26.0.0.131 and earlier, also Adobe Flash Player for Microsoft Edge and Internet Explorer 11 running version 26.0.0.120 and earlier.

Vulnerability CategoryVulnerability ImpactSeverityCVE Numbers
Security BypassInformation DisclosureImportantCVE-2017-3080
Memory CorruptionRemote Code ExecutionCriticalCVE-2017-3099
Memory CorruptionMemory address disclosureImportantCVE-2017-3100

Users are asked to updated Adobe Flash Player Desktop Runtime running on Windows, Macintosh and Linux to version 26.0.0.137.

Also Read Sources to Trace New Vulnerabilities

Adobe Connect Security Update – APSB17-22

Security Update released for Adobe Connect which resolves input validation vulnerabilities (CVE-2017-3102, CVE-2017-3103) that results in reflected and stored cross-site scripting attacks.Also this update includes Mitigation for clickjacking attacks (CVE-2017-3101).

Vulnerability CategoryVulnerability ImpactSeverityCVE Number
User Interface (UI) Misrepresentation of Critical InformationClickjacking attacksModerateCVE-2017-3101
Improper Neutralization of Input During Web Page GenerationCross-site scripting attacksImportantCVE-2017-3102
Improper Neutralization of Input During Web Page GenerationCross-site scripting attacksImportantCVE-2017-3103

Affected version 9.6.1 and users are recommended to update with version 9.6.2.

Also Read Multiple Vulnerabilities with Pre-installed Packages open Dell systems to Hack

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Threat Actors Exploiting AES Encryption for Stealthy Payload Protection

Cybersecurity researchers have uncovered a surge in the use of Advanced Encryption Standard (AES)...

33.3 Million Cyber Attacks Targeted Mobile Devices in 2024 as Threats Surge

Kaspersky's latest report on mobile malware evolution in 2024 reveals a significant increase in...

Routers Under Attack as Scanning Attacks on IoT and Networks Surge to Record Highs

In a concerning trend, the frequency of scanning attacks targeting Internet of Things (IoT)...

Google Launches Shielded Email to Keep Your Address Hidden from Apps

Google is rolling out a new privacy-focused feature called Shielded Email, designed to prevent apps...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Paragon Partition Manager Vulnerabilities Allow Attackers to Escalate Privileges and Trigger DoS Attacks

Security researchers have uncovered five significant vulnerabilities in Paragon Partition Manager's BioNTdrv.sys driver, affecting...

Substack Custom Domain Vulnerability Exposes Thousands to Potential Hijacking

A newly disclosed vulnerability in Substack's custom domain setup could allow malicious actors to...

PoC Released for Windows Hyper-V SYSTEM Privilege Exploit

Security researchers have publicly disclosed a proof-of-concept (PoC) exploit for CVE-2025-21333, a critical elevation-of-privilege vulnerability...