Adobe has released version 10.1 of Adobe Flash in order to resolve about 21 vulnerabilities. Some of these vulnerabilities were making news less than a week ago when 0-Day attacks were making use of the vulnerabilities were found in the wild. Adobe has had a very quick turn around to accelerate their scheduled quarterly update from July 13th to today, June 10th, and I applaud them for the quick work. The vulnerabilities also affected Adobe Reader and Adobe Acrobat. A patch is scheduled for those two applications to come out June 29th.
You can download the patch from the usual location – http://get.adobe.com/flashplayer/ or you can refer to this previous 404 Tech Support Article to get the latest version of Adobe Flash without being asked for a McAfee Scan or needing to download Adobe Download Manager.
As of writing, the Windows .msi file for Internet Explorer has updated to 10.1, but the download for plugin-based browsers is still dishing out 10.0.45.2. That location is available to those individuals with a license to distribute Adobe Flash and is required for deploying Flash with Group Policy.
You can read more about today’s update and what it fixes in the related Security Bulletin that Adobe posted this afternoon and the publications around the exploits at the Adobe Security blog. You can test what version of Flash you’re currently running with this Adobe Knowledge Base article. I highly recommend updating to the latest version after reading the details of what was patched.
It entertains me that the download for the Adobe Flash Installer is 2.4 MB but the License Agreement is 3.3MB.