Last Friday, Adobe confirmed two new “critical” zero-day flaws in the Adobe Flash Player browser plugin 18.0.0.204 – and earlier versions – for Windows, OS X, and Linux, now, a third flaw was found. Adobe Flash Player is a widely distributed multimedia and application player used to enhance the user experience when visiting web pages or reading email messages.

We strongly recommend disabling Adobe Flash until the exploits are fixed.

We recommend you do the following:

• Remove or disable Flash until Adobe sends out a fix.
• Once a patch is released by Adobe, update immediately.
• Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack.
• Avoid visiting websites or following links provided by unknown or untrusted sources.
• Avoid clicking on links contained in emails or attachments from unknown sources.

To verify the version of Adobe Flash Player installed on your system, access the About Flash Player page, or right-click on content running in Flash Player and select “About Adobe (or Macromedia) Flash Player” from the menu. If you use multiple browsers, perform the check for each browser you have installed on your system.