Update: Flash Player 18 released

[HansV]

Flash Player 18.0.0.160 has been released.

Flash Player for Internet Explorer (ActiveX)
and
Flash Player for Firefox etc.

Please note that you don't need to update Flash Player in Google Chrome and in Internet Explorer 11 for Windows 8 and up. These browsers take care of updates automatically.

[HansV]

The current version is Flash Player 18.0.0.194. See above for download links.

[aekyall]

Probably a silly question but .............. I have both Internet Explorer and Firefox browsers on my Windows 7 - I primarily use IE but use Firefox from time to time (and keep up to date) - is it actually necessary to download Flash Player updates twice, once for IE (through the IE browser) and again for FF (through the FF browser)? Or is just having one current version of Flash Player on my computer sufficient? The only difference between the two downloads appears to be that in IE I'm offered Chrome and in FF I'm offered McAfee as 'add ons'

Thanks,

[HansV]

The versions for Firefox and for Internet Explorer are actually different (they use different code), so you need to download and install both if you use both browsers (whether frequently or occasionally).

[aekyall]

Many thanks
Regards,

[PaulB]

I'm not too sure about IE, but if you use the download links above, you will not get the version that offers extra software products.

[StuartR]

If you only use Firefox occasionally then it will probably be most sensible to just install the IE version of Adobe Flash. If you find a need for using Flash on a particular site you can open it in IE, or alternatively you can install Flash just when you need it in Firefox, and then deinstall it again.

This will save quite a bit of effort over keeping the Firefox version of Flash up to date when you aren't using it much.

[aekyall]

Thanks Paul/Stuart - pointers duly noted and taken onboard.
Many thanks,

[StuartR]

Flash 18.0.0.203 is available from the usual location.

It is really important to install this patch as soon as possible. There are exploits out in the wild that are using the security hole to deliver Ransomware. You have been warned.

Adobe Flash exploit that was leaked by Hacking Team goes wild; patch now!

[Jay Freedman]

I got tired of the merry-go-round of Flash updates and uninstalled it months ago. I haven't missed it -- most of the things that I used to see using it were annoying video ads that accompany blogs and such, and AdBlock Plus blocks those anyway.

[StuartR]

I have now enabled "Click to play" for Flash in all my browsers. This significantly reduces the attack surface since I ONLY allow it to run if I really need the functionality on that specific page.

[Leif]

Thanks Stuart, and thankfully not quite as exhausting as the installer suggests

x.jpg

[Rudi]

[StuartR]

I do Leif, how could Adobe Flash running on your computer have known what a difficult day I've had?

[StuartR]

Another day another nasty security hole in Adobe Flash. There isn't a patch for this one yet, so BE VERY CAREFUL.

Adobde Security Bulletin

A critical vulnerability (CVE-2015-5122) has been identified in Adobe Flash Player 18.0.0.204 and earlier versions for Windows, Macintosh and Linux. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system.

Adobe is aware of reports that an exploit targeting this vulnerability has been published publicly. Adobe expects to make updates available during the week of July 12, 2015.

[Sundog]

Re Hans message with links for Flash installers--if you try them from Chrome, they'll open momentarily, then Chrome says, ahhh, I don't need no stinkin' Flash update, and the links close. Open them from a browser other than Chrome.

[RonH]

I have now enabled "Click to play" for Flash in all my browsers. This significantly reduces the attack surface since I ONLY allow it to run if I really need the functionality on that specific page.

Where can you enable this in Chrome?
Cheers Ron

[HansV]

See Re: Patch Adobe Flash as soon as possible.

[RonH]

Thanks for that link Hans ... sorted
CYa Ron

[HansV]

As PaulB mentioned in This just in..., version 18.0.0.203 18.0.0.209 has been released, patching yet another vulnerability.