Latest Version of Adobe Flash Player

[Brink]

New Adobe Flash Player New 15.0.0.239 WHQL released. See first post for more details.

 

[CountMike]

New Adobe Flash Player New 15.0.0.239 WHQL released. See first post for more details.

IE also got Flash security update, KB3018943.

 

[Jesse Williams]

Yes, I checked for updates today and I got the update. Wasn't Microsoft supposed to roll out a fix, to fix the big update that caused people issues this past week?

 

[CountMike]

Yes, I checked for updates today and I got the update. Wasn't Microsoft supposed to roll out a fix, to fix the big update that caused people issues this past week?

Let's hope so although it seems that some third party programs were involved in most cases. It would also be nice if MS would better explain purposes of each update.

 

[Jesse Williams]

I agree!

 

[Brink]

Adobe Flash Player 16.0.0.235 is available. See first post for more details.

 

[Brink]

Adobe Flash Player 16.0.0.257 is available. See first post for more details.

 

[ikram62]

in windows 8 no need of flash player , do you think its still useful for w8 ?

 

[CountMike]

in windows 8 no need of flash player , do you think its still useful for w8 ?

It's more accurate to say that IE 11 does not need Flash player, it's built in and updated thru WU. Other browsers and programs may need it to be installed separately.

 

[elbmek]

I always have had flash and shockwave, valuable additives

 

[CountMike]

I always have had flash and shockwave, valuable additives

With a bit of salt, pepper and chili it would be more palatable !

 

[elbmek]

No chili thanks

 

[Brink]

Adobe Flash Player 16.0.0.287 is available. See first post for more details.

 

[David Bailey]

 

[torre]

New vulnerability. Does not effect IE11.

Adobe is investigating reports that a zero-day flaw in Flash Player is being used by an exploit kit known as Angler. Following the Blackhole exploit kit's demise last year, Angler is the new "one to watch" this year, according to Cisco security researchers.

Malware researcher Kafeine discovered the attack on Flash Player yesterday in an instance of Angler that contains exploits for three Flash flaws - two old ones that Adobe has fixes for, and one new flaw that was not patched in last week's security update, which brought Flash for Mac and Windows up to version 16.0.0.257

Kafeine has run a partial analysis on which systems are affected by the Flash zero-day flaw. According to the company, Flash-enabled systems that the exploit works against include: Windows XP with Internet Explorer (IE) 6 to IE8, Windows 7 with IE 8, Windows 8 with IE 10, and Windows 8 with IE 10, and the Windows8-RT-KB3008925-x86 update.

â

 

[Phone Man]

MS thinks so as they released a patch today.

Microsoft security advisory: Update for vulnerabilities in Adobe Flash Player in Internet Explorer: January 22, 2015

This advisory mentions IE10 and IE11 in Windows 8

https://technet.microsoft.com/library/security/2755801

Jim

 

[Phone Man]

Looks like Flash 16.0.0.287 also has an exploit and will be patched the week of Jan 26.

Adobe Product Security Incident Response Team (PSIRT) Blog | Working to help protect customers from vulnerabilities in Adobe software. Contact us at PSIRT(at)adobe(dot)com.

Jim

 

[Phone Man]

Adobe has fixed the exploit in 16.0.0.287 and it will be released starting soon.

UPDATE (January 24): users who have enabled auto-update for the Flash Player desktop runtime will be receiving version 16.0.0.296 beginning on January 24. This version includes a fix for CVE-2015-0311. Adobe expects to have an update available for manual download during the week of January 26, and we are working with our distribution partners to make the update available in Google Chrome and Internet Explorer 10 and 11.

Jim

 

[Phone Man]

Flash 16.0.0.296 is now available at Adobe Flash Player Distribution | Adobe

Jim

 

[Phone Man]

New version 16.0.0.305 being released.

UPDATE (February 4): Users who have enabled auto-update for the Flash Player desktop runtime will be receiving version 16.0.0.305 beginning on February 4. This version includes a fix for CVE-2015-0313. Adobe expects to have an update available for manual download on February 5, and we are working with our distribution partners to make the update available in Google Chrome and Internet Explorer 10 and 11.

Jim