Another day, another Flash plugin vulnerability – but no fix yet!

7 April 2016, 02:10


If you’ve still got the Flash plugin installed you need to update (again) – but not right now because Adobe’s still working on a fix. Apparently, it’ll be ready today (7th April 2016) so keep checking the Adobe update site. Don’t forget to also update browsers like Google Chrome that have the plugin built-in.

Adobe says:

A critical vulnerability (CVE-2016-1019) exists in Adobe Flash Player 21.0.0.197 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system.

As far as we can tell, 21.0.0.197 is the latest version of the plugin. The bug is already being exploited on Windows systems, but there’s no reports yet of Mac exploits.

We’ve explained in the past how to remove Flash plugin from your Mac. You can get around idiotic sites demanding you install it to watch videos by temporarily switching your browser’s user agent.


Leave a comment...

 
---