When updating this article, we decided to leave the remainder as is, for historical reasons. But you should no longer worry about Flash Player, no matter what websites tell you. Flash Player was long used to serve malware, on both macOS and Windows, because of the frequent updates needed to the software. Any supposed Flash Player update you see is malware. If you see something like that, DO NOT DOWNLOAD THE SOFTWARE. Yet you may still come across websites claiming that you need to update Flash Player, and offering to allow you to download it. And from January 12, 2021, Adobe has blocked Flash Player content from playing on computers where that software is installed. UPDATE: As of January 1, 2021, Flash Player is no longer supported. What’s surprising is that despite crediting every one of them (and it’s quite a list), the company doesn’t seem to have a formal bug bounty reward program other than the separate web applications program run via third party company, HackerOne.Software & Apps How to tell if an Adobe Flash Player update is valid There was a time when having to patch so many flaws in a small suite of products from one company would have been seen as a failure.Īrguably, these days, it’s a sign of success – researchers are devoting the time to finding vulnerabilities before the bad guys do and Adobe is turning around fixes. Those on the even more classic Acrobat DC (2015) or Acrobat Reader DC (2015) it’s version 2015.006.30456.Īnyone who still has the old Acrobat XI or Reader XI on their computer, the last version was 11.0.23 when support for this ended a year ago.For anyone on the classic Acrobat 2017 or Acrobat Reader DC 2017, it’s version 2017.011.30105.
The update you should download depends on which version you have installed: The majority of the flaws rated important involve out-of-bounds read issues leading to information disclosure.Īs far as Adobe is aware, none are being actively exploited. It’s too early to get much detail on the flaws but those rated critical break down as 46 allowing code execution and one allowing privilege escalation. In total, the first October update brings 85 CVEs, including 47 rated as ‘critical’ with the remaining 39 classified as ‘important’. Adobe has released updates fixing a long list of security vulnerabilities discovered in the Mac and Windows versions of Acrobat and Reader.
0 kommentar(er)
