Adobe December 2018 Security Update Fixes Reader, Acrobat

Adobe has patched 87 vulnerabilities for Acrobat and Reader in its December Patch Tuesday update, including a slew of critical flaws that would allow arbitrary code-execution. The scheduled update comes less than a week after Adobe released several out-of-band fixes for Flash Player, including a...

December 11, 2018—KB4471319 (Security-only update)

None None...

December 11, 2018—KB4471326 (Security-only update)

None None...

December 11, 2018—KB4471320 (Monthly Rollup)

None None...

December 11, 2018—KB4471324 (OS Build 17134.471)

None None...

December 11, 2018—KB4471325 (Monthly Rollup)

None None...

December 11, 2018—KB4471330 (Monthly Rollup)

None None...

December 11, 2018—KB4471332 (OS Build 17763.194)

None None...

December 11, 2018—KB4471329 (OS Build 16299.846)

None None...

December 11, 2018—KB4471328 (Security-only update)

None None...

December 11, 2018—KB4471322 (Security-only update)

None None...

Exploit for Use After Free in Adobe Flash_Player

CVE-2018-15982EXP Usage msfvenom -p windows/exec...

MGASA-2018-0478 Updated flash-player-plugin packages fix security vulnerability

Use after free flaw enabling arbitrary code execution. CVE-2018-15982 Insecure Library Loading DLL hijacking flaw enabling privilege escalation. CVE-2018-15983...

Updated flash-player-plugin packages fix security vulnerability

Use after free flaw enabling arbitrary code execution. CVE-2018-15982 Insecure Library Loading DLL hijacking flaw enabling privilege escalation. CVE-2018-15983...

FreeBSD : Flash Player -- multiple vulnerabilities (49cbe200-f92a-11e8-a89d-d43d7ef03aa6)

Adobe reports : - This update resolves a use-after-free vulnerability that could lead to arbitrary code execution CVE-2018-15982. - This update resolves an insecure library loading vulnerability that could lead to privilege escalation CVE-2018-15983. C Tenable Network Security, Inc. The descripti...

Adobe Flash Player Insecure Library Loading (DLL Hijacking) Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to elevate...

New Adobe Flash Zero-Day Exploit Found Hidden Inside MS Office Docs

Cybersecurity researchers have discovered a new zero-day vulnerability in Adobe Flash Player that hackers are actively exploiting in the wild as part of a targeted campaign appears to be attacking a Russian state health care institution. The vulnerability, tracked as CVE-2018-15982, is a...

Exploit for Use After Free in Adobe Flash_Player

CVE-2018-15982PoC CVE-2018...

Exploit for Use After Free in Adobe Flash_Player

CVE-2018-15982PoC CVE-2018...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Adobe Flash Player installer. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review Adobe Security Bulletin APSB18-...