Adobe patches 27 critical Flash Player vulnerabilities

Adobe has issued patches for a large number of vulnerabilities in its Flash Player, many of which could allow attackers to remotely take full control of systems running the software.

In its latest security advisory, Adobe said the patches handle an integer underflow vulnerability, several use-after-free flaws as well as memory corruption issues. 

All the above allow for remote code execution.

Three further vulnerabilites in Flash Player can be exploited for information theft, and are patched with the latest updates.

The Flash Player desktop runtime 22.0.0.211 and earlier for Microsoft Windows and Apple OS X / macOS are vulnerable, as are Google's ChomeOS and the same version shipped with Microsoft's Edge and Internet Explorer 11 web browsers in Windows 8.1 and 10.

Adobe's extended support release of Flash Player version 18.0.0.366 and earlier is also vulnerable, along with version 11.2.202.632 for Linux, the company said.

The updated versions of Flash Player are:

• 23.0.0.162 - Microsoft Windows and Apple macOS / OS X.
• 18.0.0.375 - Extended support release for Windows and macOS / OS X.
• 23.0.0.162 - Built-in Flash Player for Google Chrome and Microsoft Edge / Internet Explorer 11.
• 11.2.202.635 - Linux version of Flash Player.