Adobe Warns Of 'Critical' New Flash Player Bug

Emergency patch on the way for the flaw, which has been spotted being exploited in attacks.



Adobe has issued a security advisory warning about a newly discovered critical vulnerability in Adobe Flash Player currently being used in attacks.

A critical vulnerability (CVE-2016-1019) was found in Adobe Flash Player Version 21.0.0.197 and earlier versions, for Windows, Mac, Linux, and Chrome OS, could allow an attacker to crash and wrest control of the victim's machine.

Adobe notes that there are reports that the bug is being used in attacks on systems running Windows 7 and Windows XP with Flash Player version 20.0.0.306 and earlier.

A mitigation method in Flash Player version 21.0.0.182 defends against attacks exploiting the newly discovered vulnerability and protects systems running Flash Player 21.0.0.182 and later. Adobe recommends updating Flash to that version.

An emergency patch could come as soon as April 7, according to Adobe.

See the Adobe Product Security Incident Response Team blog for the latest information.

For complete Security Advisory detail, read the Adobe Security Advisory

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Email This  | 
Print  | 
RSS
More Insights
Copyright © 2020 UBM Electronics, A UBM company, All rights reserved. Privacy Policy | Terms of Service