Adobe released security updates for Flash Player that address two vulnerabilities, including a critical flaw, tracked as CVE-2018-15982, exploited in targeted attacks. The flaw could be exploited by attackers to execute arbitrary code, Adobe addressed it with the release of Flash Player 32.0.101 for Windows, macOS, Linux, and Chrome OS. Adobe confirmed that it is aware of attacks exploiting the flaw in the wild. The attack strategy is very clever: Flash file with 0day vulnerability is inserted into decoy Word document which is compressed into one RAR file with a JPG picture.”]
Source: https://securityaffairs.co/wordpress/78712/hacking/cve-2018-15982-flash-zero-day.html