Adobe has released patches for a string of critical vulnerabilities in Flash on all of the major supported platforms
From Threatpost: The update to Flash fixes 12 vulnerabilities, including a number of memory corruption vulnerabilities, stack overflows and heap corruption bugs. All but one of the flaws could lead to remote code execution, and the remaining one which only affects Flash on Internet Explorer, could result in a cross-domain policy bypass. "Critical vulnerabilities have been identified in Adobe Flash Player 11.0.1.152 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 11.0.1.153 and earlier versions for Android. These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system," the company said in its advisory.