Adobe Flash Player is gone but it may still be on your devices

Adobe ended support for Flash Player on 31 December 2020, and blocked all Flash content from running on 12 January 2021. That was over five years ago. For most people, the change happened quietly in the background as browsers updated and Flash simply stopped working. The problem is that “stopped working” is not the same as “removed.” Many Windows machines, particularly older business devices, still carry Flash Player files that were never fully cleaned up. Those files receive no security patches. They never will again.

If your business runs older workstations, a legacy intranet, or a website that has not been rebuilt since 2018, it is worth checking whether Flash is still present. Our IT audit service regularly turns up remnants of Flash on devices that staff assumed were clean, especially machines rebuilt from old images or restored from backup.

Why Flash was switched off

Adobe first announced the end of Flash in July 2017, giving businesses and developers over three years to move their content to modern standards. Adobe’s end-of-life page confirms that open standards such as HTML5, WebGL, and WebAssembly were the intended replacements. Most websites made the switch well before the deadline. Some did not, particularly those running older content, custom-built training modules, or legacy intranet tools.

The browsers followed suit. Chrome, Firefox, Edge, and Safari all removed Flash support around the same time. Safari dropped it with the release of macOS Big Sur in November 2020, and as an update for Catalina and Mojave users. Chrome and Edge, which share the same underlying engine, completed their removal with the Chrome 88 release in January 2021. Firefox shipped without Flash support from version 85 onwards. All major browsers have now had Flash support removed for over five years.

The security risk that remains

Flash Player accumulated hundreds of known security vulnerabilities over its lifetime, including critical remote code execution flaws. Adobe stopped issuing patches on 31 December 2020. Any copy of Flash still sitting on a Windows device is unpatched code with a long history of exploits, and that will never change.

The ACSC Essential Eight includes “patch applications” as a baseline control. Running end-of-life software with no available patches is a direct conflict with that control. If your business is working toward Essential Eight compliance, or already holds a maturity rating, Flash remnants on devices are a gap worth closing.

There is also a practical risk from fake Flash updates. Since Adobe removed all official Flash download pages, any installer or “Flash update” prompt a user encounters online is not legitimate. These prompts are a common delivery method for malware. Staff need to know this.

Does Flash still affect websites?

Up until Flash’s end-of-life date, it was still used on more than 2% of the world’s top 10 million websites, despite the 2017 warning. Most of those sites have since been updated. However, some older Australian business websites, particularly those with embedded video players, interactive calculators, or e-learning content built before 2018, may still reference Flash objects. Those elements simply will not load in any modern browser. Visitors see a blank space or an error.

If your business website is more than five or six years old and has not had a content audit, it is worth checking. Broken page elements affect both user experience and search rankings. Our IT consulting team can identify these issues as part of a broader technology review.

How to check if Flash is still on your devices

On Windows, Flash Player installed as a standalone application may still appear under “Apps and Features” in Settings. Adobe provides an uninstaller on its website for those who have the standalone version installed. That said, manual uninstalls often miss something. Older device images, restored backups, and machines that were built before 2021 can still carry Flash utility binaries in the Windows System32 directory even after the standard uninstaller has run.

For businesses managing more than a handful of machines, a manual check is not practical. A managed detection or endpoint management tool can scan across all devices and confirm whether any Flash artefacts remain. If you are unsure what is on your endpoints, that is a question your IT support provider should be able to answer quickly. If they cannot, it may be time for an IT security assessment.

• Search “Adobe Flash Player” under Apps and Features in Windows Settings.
• Check with your IT team whether any browser extensions or legacy plugins reference Flash.
• Review any intranet pages, training systems, or internal tools built before 2018.
• Ask your website provider to confirm no Flash objects remain in your public-facing site.
• Brief staff that any “Flash update” prompt is a scam and should be reported.

What replaced Flash?

HTML5 is the standard that replaced Flash for video, animation, and interactive content. It runs natively in every modern browser with no plugin needed. WebGL handles complex graphics and 3D rendering. WebAssembly handles high-performance application logic. All three standards are actively maintained and receive regular security updates, which is the opposite of Flash’s current state.

If your business has legacy training content, kiosk software, or internal tools that relied on Flash, rebuilding that content in HTML5 is the right call. It is also usually cheaper than expected, because HTML5 tools and authoring platforms are now mature and widely available.

A note on legacy systems in professional services

Businesses in legal, accounting, and financial services often run older document management or practice management systems. Some of these used Flash for interface elements or reporting dashboards. If you are in professional services and have not reviewed your internal systems since 2020, this is a practical reason to do so. Our IT support for professional services team has helped a number of Brisbane businesses identify and replace Flash-dependent tooling as part of broader system upgrades.

Where to from here?

Flash Player is no longer a product anyone should be running. If you are not certain whether your devices, website, or internal systems still carry Flash content or files, the safest step is a quick check. We can help with that as part of a broader IT audit or a one-off security review. Get in touch with the TTA team and we will take a look.