Friday, October 9, 2026

Adobe patches Multiple Security Flaw in Flash Player and Adobe Connect

Adobe releases patches for critical security flaws which allows attackers to control your system. This bundle applies for Windows, Macintosh, Linux and Chrome OS.

Flash Player Security Update – APSB17-21

These critical vulnerabilities affected Adobe Flash Player Desktop Runtime, Adobe Flash Player for Google Chrome running with versions of 26.0.0.131 and earlier, also Adobe Flash Player for Microsoft Edge and Internet Explorer 11 running version 26.0.0.120 and earlier.

Vulnerability CategoryVulnerability ImpactSeverityCVE Numbers
Security BypassInformation DisclosureImportantCVE-2017-3080
Memory CorruptionRemote Code ExecutionCriticalCVE-2017-3099
Memory CorruptionMemory address disclosureImportantCVE-2017-3100

Users are asked to updated Adobe Flash Player Desktop Runtime running on Windows, Macintosh and Linux to version 26.0.0.137.

Also Read Sources to Trace New Vulnerabilities

Adobe Connect Security Update – APSB17-22

Security Update released for Adobe Connect which resolves input validation vulnerabilities (CVE-2017-3102, CVE-2017-3103) that results in reflected and stored cross-site scripting attacks.Also this update includes Mitigation for clickjacking attacks (CVE-2017-3101).

Vulnerability CategoryVulnerability ImpactSeverityCVE Number
User Interface (UI) Misrepresentation of Critical InformationClickjacking attacksModerateCVE-2017-3101
Improper Neutralization of Input During Web Page GenerationCross-site scripting attacksImportantCVE-2017-3102
Improper Neutralization of Input During Web Page GenerationCross-site scripting attacksImportantCVE-2017-3103

Affected version 9.6.1 and users are recommended to update with version 9.6.2.

Also Read Multiple Vulnerabilities with Pre-installed Packages open Dell systems to Hack

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code

Toronto, Canada, October 8th, 2026, CyberNewswire Insignary Launches Clarity AIR:...

PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution

A proof-of-concept (PoC) exploit has been released for CVE-2026-102489,...

Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available

A critical vulnerability in LMCache allows unauthenticated attackers to...

16 Malicious Firefox Extensions Impersonate Crypto Wallets to Steal Seed Phrases and Private Keys

16 malicious Firefox extensions that impersonate cryptocurrency wallets to...

Exposed DarkSword iOS Servers Reveal Crypto Wallet Theft From Compromised iPhones

Exposed directories on five servers have revealed an operational...

wolfSSH Patches 5 Security Vulnerabilities, Including Critical SSH Authentication Bypass

wolfSSL has released wolfSSH version 1.6.0, which addresses five...

Critical Gitea Vulnerabilities Allow Attackers to Bypass Authentication and Execute Code

Gitea has released version 28.0.0, addressing 20 vulnerabilities related...

Related Articles

Recent News