Adobe rolls out patch for 2nd Flash zero-day flaw

Adobe over the weekend rolled out a patch for the second of two zero-day flaws in its Flash Player software that could potentially allow attacks.

The two vulnerabilities had been actively targeted, with Adobe patching only one of them last week, security vendor Sophos said.

"The good news is that Adobe got its patch ready early, although you can only get it via auto-update at the moment," it said.

It noted Adobe rolled out the second patch over the weekend, earlier than its initial timetable of sometime this week.

Quoting Adobe, Sophos said users who enabled auto-update for Flash Player may get Version 16.0.0.296 starting January 24.

The update available for manual download may arrive January 26. — Joel Locsin/BM, GMA News