Adobe releases patches for critical security flaws which allows attackers to control your system. This bundle applies for Windows, Macintosh, Linux and Chrome OS.
These critical vulnerabilities affected Adobe Flash Player Desktop Runtime, Adobe Flash Player for Google Chrome running with versions of 26.0.0.131 and earlier, also Adobe Flash Player for Microsoft Edge and Internet Explorer 11 running version 26.0.0.120 and earlier.
| Vulnerability Category | Vulnerability Impact | Severity | CVE Numbers |
| Security Bypass | Information Disclosure | Important | CVE-2017-3080 |
| Memory Corruption | Remote Code Execution | Critical | CVE-2017-3099 |
| Memory Corruption | Memory address disclosure | Important | CVE-2017-3100 |
Users are asked to updated Adobe Flash Player Desktop Runtime running on Windows, Macintosh and Linux to version 26.0.0.137.
Also Read Sources to Trace New Vulnerabilities
Security Update released for Adobe Connect which resolves input validation vulnerabilities (CVE-2017-3102, CVE-2017-3103) that results in reflected and stored cross-site scripting attacks.Also this update includes Mitigation for clickjacking attacks (CVE-2017-3101).
| Vulnerability Category | Vulnerability Impact | Severity | CVE Number |
| User Interface (UI) Misrepresentation of Critical Information | Clickjacking attacks | Moderate | CVE-2017-3101 |
| Improper Neutralization of Input During Web Page Generation | Cross-site scripting attacks | Important | CVE-2017-3102 |
| Improper Neutralization of Input During Web Page Generation | Cross-site scripting attacks | Important | CVE-2017-3103 |
Affected version 9.6.1 and users are recommended to update with version 9.6.2.
Also Read Multiple Vulnerabilities with Pre-installed Packages open Dell systems to Hack
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…