Adobe Fixes Multi-Platform Flash Player Zero-Day and Privilege Escalation Issue

Adobe patched a cross-platform zero-day Flash Player vulnerability which could allow potential remote attackers to trigger an execute arbitrary code on vulnerable machines.

The security issue tracked as CVE-2018-15982 is present in Flash Player 31.0.0.153 and earlier versions installed on computers running Windows, macOS, and Linux.

According to Adobe, there are already reports of an exploit for CVE-2018-15982 existing in the wild within maliciously crafted Microsoft Office documents containing the zero-day code.

The zero-day exploit has been observed in the form of a Flash Active X object which would drop a backdoor Trojan capable of running on 32-bit and 64-bit architectures.

Qihoo 360 Core Security, Gigamon Applied Threat Resea...