Risk: High
Adobe Systems have patched five vulnerabilities in Flash, including one that could be used in "clickjacking" attacks to secretly spy on users through their webcams.
These fixes have been rolled into Flash Player 10, the new version launched in October. Previously, Adobe had promised that Flash 10 would fix the clickjacking bug and another flaw that has been used by hackers for more than a month to poison clipboards with malicious URLs.