A critical vulnerability (CVE-2017-11292) has been identied in Adobe Flash Player / Desktop Runtime version (27.0.0.159) and earlier ver-sions for Windows, Macintosh and Linux. Adobe is aware of a report that an

exploit for this vulnerability is being used in limited, targeted attacks. This vulnerability is found to be used by the BlackOasis (a threat actor identied by

Kaspersky Labs) targeted attacks campaign. Adobe has released security patch for fixing (CVE-2017-11292) on October 16, 2017.