Adobe has released Version 24.0.0.186 of Adobe Flash Player for Microsoft Windows, Macintosh, Chrome and Linux.
These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. Note in particular that an exploit for CVE-2016-7892 exists in the wild, and is being used in limited, targeted attacks against users running Internet Explorer (32-bit) on Windows.
If you use the download center, uncheck any unnecessary extras.
- Non-IE Plugin (Opera, Firefox, Etc.): http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_24_plugin.exe (http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_24_plugin.exe)
- Flash Player For Internet Explorer, Windows 7 and earlier: http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_24_active_x.exe (http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_24_active_x.exe)
- Internet Explorer and Microsoft Edge: Windows Server 2012, Windows 8.1, Windows Server 2012 R2, Windows RT 8.1 and Windows 10: Adobe Flash Player is now a security bulletin rather than a security advisory and is distributed via the normal Windows Update channel.
- Flash Player Uninstaller: http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe (http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe)
- Adobe AIR: http://get.adobe.com/air/ (http://get.adobe.com/air/)
Release Notes: Flash Player® 24 AIR® 24 (https://helpx.adobe.com/flash-player/release-note/fp_24_air_24_release_notes.html)
Security Bulletin (https://helpx.adobe.com/security/products/flash-player/apsb16-39.html)