Adobe on Wednesday patched seven critical vulnerabilities in Flash Player, including one reported by Google researchers. The bug attackers have been exploiting is a cross-site scripting (XSS) flaw in the Flash Player plug-in used by Microsoft’s IE. The other six vulnerabilities, all rated critical like the XSS bug, were memory corruption flaws or security bypass bugs that “could cause a crash and potentially allow an attacker to take control of the affected system” Google updated Chrome to offer the newly-patched Flash to its users.”]
Source: https://www.csoonline.com/article/2130980/adobe-confirms-new-zero-day-flash-bug.html