On Friday, we reported about a major security vulnerability in Flash that affects all versions of Flash for Windows, Mac and Linux computers. This vulnerability left Flash open to exploits through which hackers can crash a target PC or even take complete control of it.
According to today’s security bulletin, Adobe has issued a patch that fixes the vulnerability (identifier APSB15-27). Adobe says that it is aware of a report that indicates the latest version has been used in a limited. targeted attacks.
Adobe has released security updates for Adobe Flash Player. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system.
Adobe is aware of a report that an exploit for CVE-2015-7645 is being used in limited, targeted attacks.
Adobe has also posted a list of Flash version affected by this vulnerability.
Affected Flash Version
| Product | Affected Versions | Platform |
|---|---|---|
| Adobe Flash Player Desktop Runtime | 19.0.0.207 and earlier | Windows and Macintosh |
| Adobe Flash Player Extended Support Release | 18.0.0.252 and earlier | Windows and Macintosh |
| Adobe Flash Player for Google Chrome | 19.0.0.207 and earlier | Windows, Macintosh, Linux and ChromeOS |
| Adobe Flash Player for Microsoft Edge and Internet Explorer 11 | 19.0.0.207 and earlier | Windows 10 |
| Adobe Flash Player for Internet Explorer 10 and 11 | 19.0.0.207 and earlier | Windows 8.0 and 8.1 |
| Adobe Flash Player for Linux | 11.2.202.535 and earlier | Linux |
Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version:
Flash Version With Fix
| Product | Updated Versions | Platform | Priority | Availability |
|---|---|---|---|---|
| Adobe Flash Player Desktop Runtime | 19.0.0.226 | Windows and Macintosh | 1 | Flash Player Download Center Flash Player Distribution |
| Adobe Flash Player Extended Support Release | 18.0.0.255 | Windows and Macintosh | 1 | Extended Support |
| Adobe Flash Player for Google Chrome | 19.0.0.226 | Windows, Macintosh and Linux | 1 | Google Chrome Releases |
| Adobe Flash Player for Google Chrome | 19.0.0.225 | Chrome OS | 1 | Google Chrome Releases |
| Adobe Flash Player for Microsoft Edge and Internet Explorer 11 | 19.0.0.226 | Windows 10 | 1 | Microsoft Security Advisory |
| Adobe Flash Player for Internet Explorer 10 and 11 | 19.0.0.226 | Windows 8.0 and 8.1 | 1 | Microsoft Security Advisory |
| Adobe Flash Player for Linux | 11.2.202.540 | Linux | 3 | Flash Player Download Center |
Flash has been repeatedly affected by security issues that leave users vulnerable, so much so that companies have taken steps against it by disabling it in their browsers, and in some cases outright calling for Flash to be retired. If you are running any version of Flash, be sure to check whether it has any updates available, and install them if so.
Source: Adobe
