Adobe patches 27 critical Flash Player vulnerabilities

By

Multiple flaws allow remote code execution.

Adobe has issued patches for a large number of vulnerabilities in its Flash Player, many of which could allow attackers to remotely take full control of systems running the software.

Adobe patches 27 critical Flash Player vulnerabilities

In its latest security advisory, Adobe said the patches handle an integer underflow vulnerability, several use-after-free flaws as well as memory corruption issues. 

All the above allow for remote code execution.

Three further vulnerabilites in Flash Player can be exploited for information theft, and are patched with the latest updates.

The Flash Player desktop runtime 22.0.0.211 and earlier for Microsoft Windows and Apple OS X / macOS are vulnerable, as are Google's ChomeOS and the same version shipped with Microsoft's Edge and Internet Explorer 11 web browsers in Windows 8.1 and 10.

Adobe's extended support release of Flash Player version 18.0.0.366 and earlier is also vulnerable, along with version 11.2.202.632 for Linux, the company said.

The updated versions of Flash Player are:

  • 23.0.0.162 - Microsoft Windows and Apple macOS / OS X.
  • 18.0.0.375 - Extended support release for Windows and macOS / OS X.
  • 23.0.0.162 - Built-in Flash Player for Google Chrome and Microsoft Edge / Internet Explorer 11.
  • 11.2.202.635 - Linux version of Flash Player.
Got a news tip for our journalists? Share it with us anonymously here.
Copyright © iTnews.com.au . All rights reserved.
Tags:

Most Read Articles

NSW Police to embark on $126m IT overhaul

NSW Police to embark on $126m IT overhaul

CBA looks to GenAI to assist 1200 'security champions'

CBA looks to GenAI to assist 1200 'security champions'

Australia's super funds told to assess authentication controls

Australia's super funds told to assess authentication controls

WestJet probes cyber security incident

WestJet probes cyber security incident

Log In

  |  Forgot your password?