Yesterday, Adobe announced a new version of Flash, 13.0.0.182. The new version includes fixes for several security vulnerabilities (including one of the two found at Pwn2Own), as well as numerous other bug fixes and enhancements. There are also some new features, but these are mostly of interest to developers. The official release notes page has all the details.
As usual, the integrated versions of Flash in Internet Explorer 10 and 11 will be updated via Windows Update, and Chrome’s integrated Flash will be updated automatically by the browser itself.
The recent Pwn2Own hacking competition revealed vulnerabilities in a variety of software products, including Chrome, Firefox, Internet Explorer, and Flash.
While patches for Firefox and Chrome were released soon after the results of the contest were published, the vulnerabilities in Flash remain unpatched. They are identified as CVE-2014-0506 and CVE-2014-0510. Severity is ranked as high for both vulnerabilities. No exploits for these vulnerabilities have yet been seen in the wild.
Update 2014Apr09: CVE-2014-0506 was fixed in Flash 13.0.0.182.
Adobe announced a new version of Flash yesterday. Version 12.0.0.77 fixes two security vulnerabilities flagged by Adobe as Important.
As usual, Google Chrome will update itself with the latest version of Flash, while Internet Explorer 10 and 11 on Windows 8 and 8.1 will receive the latest Flash updates via Windows Update.
You can check the version of Flash currently installed on your computer (or more accurately, in your browser), by visiting the About Adobe Flash page, and you can download the new version from the Player Download Center (warning: this page will install additional software by default; make sure to uncheck any optional software checkboxes).
Adobe will no longer test Flash on Windows XP after the next quarterly update. You can continue to use Flash on Windows XP after that, but it will become increasingly risky, especially if it’s enabled in your web browser. This is yet another nail in the coffin for Windows XP.
On February 20, Adobe announced a new version of Flash that addresses critical security vulnerabilities. Security bulletin apsb14-07 describes the vulnerabilities.
We strongly recommend upgrading to this new version of Flash (12.0.0.70) as soon as possible, especially if you have Flash enabled in a web browser and you use that web browser for web surfing.
As usual, Google Chrome will update itself to the latest version of Chrome, and Internet Explorer 10 and 11 will be updated to the latest Flash by way of Windows Update.
Yesterday Adobe released a new version of Flash (12.0.0.44) that addresses a critical security vulnerability. There is some evidence that the vulnerability is already being exploited in the wild, so everyone should update their browsers ASAP.
As usual, Internet Explorer 10 for Windows 8 and Internet Explorer 11 for Windows 8.1 will receive the new Flash version via Windows Update, and Chrome will update to the new Flash automatically.
A new version of Chrome fixes eleven security issues and adds some enhancements, including indicators that tell you which tab is generating audio, better blocking of malware files, and stability and performance improvements. The version of Flash embedded in Chrome was updated to the latest version (12.0.0.41) as well.
As usual, Flash in Internet Explorer 10 on Windows 8.x will be updated separately, by way of Microsoft Update. Google Chrome will also get the new version of Flash via its own internal update mechanism.
The latest version of Flash includes several fixes for bugs and security vulnerabilities. The official announcement lists the bug fixes and other improvements, while the associated security bulletin provides additional technical details.
As usual, Flash in Google Chrome is updated automatically through Chrome’s built-in updater, while Flash in Internet Explorer on Windows 8 is updated via Windows Update.
Rants and musings on topics of interest. Sometimes about Windows, Linux, security and cool software.
Close
Ad-blocker not detected
Consider installing a browser extension that blocks ads and other malicious scripts in your browser to protect your privacy and security. Learn more.