Flash is a general-purpose virtual machine with a large attack surface, including a JIT and access to the GPU. The Adobe CDM has a tightly-controlled API. Unless Adobe&#x27;s Flash updater, Firefox manages CDM updates so any CDM security fixes can be deployed to users within 24–48 hours.