Adobe Releases Flash Player 24.0.0.194 to Fix 13 Security Flaws

Just like Microsoft, Adobe rolled out security updates for its software, including a patch for Flash Player that brings it to version 24.0.0.194.

Flash Player 24.0.0.194 comes to fix a total of 13 security vulnerabilities, some of which could lead to information disclosure and remote code execution. The patched vulnerabilities are listed in the table at the end of the article, and Adobe says that everyone needs to update as soon as possible.

Note that while Adobe is offering this new Flash Player version as a separate package, users of Microsoft Edge and Internet Explorer 11, but also those who configured Google Chrome as default browser, are getting the patch as part of an integrated update. Window users, for instance, are automatically updated to the latest Flash Player version via Windows Update.

Acrobat and Reader patches

Additionally, Adobe is also releasing a second bulletin, APSB17-01, in order to address a total of 29 vulnerabilities in Acrobat and Reader. Just like in the case of Flash Player, Adobe said that the patch fixes code execution and security bypass vulnerabilities due to many memory corruption, type conversion, heap overflow and use-after-free bugs.

This time, users need to download the new versions manually, as the updating packages do not come built-in as part of other software solutions.

It goes without saying that users need to install the updated software as soon as possible, especially because they include patches for critical security vulnerabilities that could expose your systems.

Adobe’s Flash Player has long been considered one of the most vulnerable software solutions, and deploying patches as soon as they are released is critical for everyone. Furthermore, exploits for Flash Player vulnerabilities could be included in larger exploit kits that would be used against users on unpatched systems.

Microsoft has also released security updates earlier today, but in this case, the company only shipped three different bulletins to patch vulnerabilities in Windows, Office, and its browsers.