It can be both but it definitely had a security problem

> Mitre lists more than 1,000 Adobe Flash vulnerabilities.

>Flash ranks 14th on the list of products ranked by the number of vulnerabilities – one of only two applications in the top 25 that aren’t operating systems or browsers.

https://www.datacenterknowledge.com/security-and-risk-manage...