A new Flash Player zero-day vulnerability (CVE-2016-1019) has been actively exploited by threat actors in attacks against systems running Windows XP and 7. The vendor, which will release a security patch as early as April 7, has credited Kafeine of Proofpoint, Genwei Jiang of FireEye, and Clement Lecigne of Google for reporting the issue. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system. This is the third time that Adobe released a Flash Player update this year.”]
Source: https://securityaffairs.co/wordpress/46037/hacking/flash-player-zero-day-vulnerability.html