Flash Player (28.0.0.161) was released on Feb 6, 2018 with important functional and critical security fixes.
Exploit
Adobe would like to thank the following individuals and organizations for reporting this issue and for working with Adobe to help protect our customers:
- KrCERT/CC (CVE-2018-4878)
- bo13oy of Qihoo 360 Vulcan Team working with Trend Micro's Zero Day Initiative (CVE-2018-4877)
- Patch ID : 307083 - Update for Adobe Flash Player NPAPI (28.0.0.161)
- Patch ID : 307084 - Update for Adobe Flash Player PPAPI (28.0.0.161)
- Patch ID : 307085 - Update for Adobe Flash Player for IE (28.0.0.161)
Steps to follow:
1. Sync Patch Database and scan machines to find if their missing the Flash Player security update.
We are working to release the following updates soon:
- Windows Security updates for Flash Player - Refer
- Mac Security updates for Flash Player