Via LWN:

For those of you using the Adobe Flash player (including on Linux or Android), and, possibly, Adobe Reader users as well: the company has announced a “critical” vulnerability which, evidently, is being actively exploited.

We get to wonder how this can possibly be a critical vulnerability on each and every platform it runs on. Also, we’ll probably never find out how it worked. It’s the latter that annoys me.

As for security measures, there’s a choice between not having Flash at all, or hammering out a tight MAC policy. For me, the former is less hassle ;)