Categories: CVE/vulnerability

Adobe patches Multiple Security Flaw in Flash Player and Adobe Connect

Adobe releases patches for critical security flaws which allows attackers to control your system. This bundle applies for Windows, Macintosh, Linux and Chrome OS.

Flash Player Security Update – APSB17-21

These critical vulnerabilities affected Adobe Flash Player Desktop Runtime, Adobe Flash Player for Google Chrome running with versions of 26.0.0.131 and earlier, also Adobe Flash Player for Microsoft Edge and Internet Explorer 11 running version 26.0.0.120 and earlier.

Vulnerability CategoryVulnerability ImpactSeverityCVE Numbers
Security BypassInformation DisclosureImportantCVE-2017-3080
Memory CorruptionRemote Code ExecutionCriticalCVE-2017-3099
Memory CorruptionMemory address disclosureImportantCVE-2017-3100

Users are asked to updated Adobe Flash Player Desktop Runtime running on Windows, Macintosh and Linux to version 26.0.0.137.

Also Read Sources to Trace New Vulnerabilities

Adobe Connect Security Update – APSB17-22

Security Update released for Adobe Connect which resolves input validation vulnerabilities (CVE-2017-3102, CVE-2017-3103) that results in reflected and stored cross-site scripting attacks.Also this update includes Mitigation for clickjacking attacks (CVE-2017-3101).

Vulnerability CategoryVulnerability ImpactSeverityCVE Number
User Interface (UI) Misrepresentation of Critical InformationClickjacking attacksModerateCVE-2017-3101
Improper Neutralization of Input During Web Page GenerationCross-site scripting attacksImportantCVE-2017-3102
Improper Neutralization of Input During Web Page GenerationCross-site scripting attacksImportantCVE-2017-3103

Affected version 9.6.1 and users are recommended to update with version 9.6.2.

Also Read Multiple Vulnerabilities with Pre-installed Packages open Dell systems to Hack

Gurubaran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Hack The box “Ghost” Challenge Cracked – A Detailed Technical Exploit

Cybersecurity researcher "0xdf" has cracked the "Ghost" challenge on Hack The Box (HTB), a premier…

9 hours ago

Sec-Gemini v1 – Google’s New AI Model for Cybersecurity Threat Intelligence

Google has unveiled Sec-Gemini v1, an AI model designed to redefine cybersecurity operations by empowering…

9 hours ago

U.S. Secures Extradition of Rydox Cybercrime Marketplace Admins from Kosovo in Major International Operation

The United States has successfully extradited two Kosovo nationals, Ardit Kutleshi, 26, and Jetmir Kutleshi,…

14 hours ago

Ivanti Fully Patched Connect Secure RCE Vulnerability That Actively Exploited in the Wild

Ivanti has issued an urgent security advisory for CVE-2025-22457, a critical vulnerability impacting Ivanti Connect…

2 days ago

Beware! Weaponized Job Recruitment Emails Spreading BeaverTail and Tropidoor Malware

A concerning malware campaign was disclosed by the AhnLab Security Intelligence Center (ASEC), revealing how…

2 days ago

EncryptHub Ransomware Uncovered Through ChatGPT Use and OPSEC Failures

EncryptHub, a rapidly evolving cybercriminal entity, has come under intense scrutiny following revelations of operational…

2 days ago