Adobe fixed 21 vulnerabilities across four products today, releasing patches for Flash, Shockwave Player, Captivate, and Adobe Digital Editions.
Most of the vulnerabilities, 15 of the 21, are marked critical by the company because they could lead to code execution. The updates came in the form of four security bulletins Tuesday morning as part of Adobe’s regularly scheduled patch cycle.
All of the bugs in Flash – four use after free vulnerabilities and five memory corruption vulnerabilities – could lead to remote code execution, Adobe warns. The bulk of the vulnerabilities were discovered by a CloverSec Labs researcher that goes by the handle bee13oy, and Mateusz Jurczyk and Natalie Silvanovich, two researchers with Google’s Project Zero.
Read more