Adobe released a security update on Dec. 8 fixing many vulnerabilities in Flash Player, several with a critical severity and priority 1 rating.
To see a list of the latest Flash Player version information for commonly used operating system platforms and browsers, please visit:
About Adobe Flash Player
Background
Adobe's Dec. 8, 2015 security updates for Flash Player fix a total of 78 vulnerabilities. Some of the flaws can lead to remote code execution and system takeover by an attacker.
Platforms affected
Because these flaws are with Flash Player itself, the update will appy to any system where Flash or a browser with built-in Flash player is installed.
Because some browsers have Flash built into them, updates must be obtained and applied for those browsers separately from any standalone Flash updates. Chrome will update itself if you go to Chrome's Help, then "About" page, then allow it to restart when it's finished updating. Internet Explorer by contrast will update via Microsoft's Windows Updates, or through IU's Microsoft Update Service if the computer is configured to use that. Other platforms will vary.
Given the continued use of Flash Player by many IU users, this update should be applied on any system where Flash is used. To further mitigate the potential for exploitation, Click-to-Play for the Adobe Flash Player browser add-on should be enabled. Flash should be removed from computers that do not require it.