A vulnerability has been reported in Adobe Flash Player, which can be exploited by malicious people to bypass certain security restrictions.
IMPACT: MEDIUM
PUBLISH DATE: 12-09-2018
OVERVIEW
A critical vulnerability in Adobe Flash Player 30.0.0.154 and earlier versions has been found and patched. Successful exploitation of the vulnerability could lead to information disclosure and security bypass.
ANALYSIS
An unspecified error in the Adobe Flash versions 30.0.0.154 and earlier can be exploited to gain otherwise restricted privileges. Consequently, it’ll disclose certain sensitive information that may prove to be damaging for an organization’s confidentiality.
The vulnerability has been addressed in the latest updates of Adobe Flash Player for Windows, macOS, Linux and Chrome OS.
AFFECTED PRODUCTS
Adobe Flash Player 30.x
UPDATES
Upgrade to version 31.0.0.108 for the following products.
- Adobe Flash Player Desktop Runtime
- Adobe Flash Player for Google Chrome
- Adobe Flash Player for Microsoft Edge and Internet Explorer 11
- Adobe Flash Player Desktop Runtime