
image credit: unsplash
In Flash Player, for which Adobe plans on providing security updates only until the end of the year, the company patched a critical use-after-free bug that can allow an attacker to execute arbitrary code in the context of the current user.
A patch for this vulnerability is included in Flash Player 32.0.0.387, including for Chrome, Edge and Internet Explorer.
In its Framemaker document processor, Adobe fixed three critical vulnerabilities, including two out-of-bounds write issues that allow arbitrary code execution, and a memory corruption bug that can also be exploited for code execution.