Adobe has released an emergency security update for Flash Player, protecting against a vulnerability (known as CVE-2016-1019) that is being actively exploited by hackers. This vulnerability is also present in the Mac OS X, Linux and ChromeOS editions of Flash Player. Adobe is aware of reports that Flash Player version 20.0.306 and earlier is being exploited by malicious hackers to spread the Cerber ransomware via use of the Magnitude exploit kit. If youre not quite ready to take the step of entirely uninstalling Flash, then you should at the very least consider enabling Click to Play”]
Source: https://grahamcluley.com/adobe-flash-update-actively-exploited-zero-day-flaw/