Recently, Microsoft released a new patch number KB4074595, dedicated to fixing the latest 0-day zero-day vulnerability in Adobe Flash Player.
This vulnerability, which existed in pre-Adobe Flash Player versions 28.0.0.161, enables attackers to spread Office documents containing malicious Flash content over the web or through mail, gain system control, and execute arbitrary code.
Operating system, except Windows 7 all versions are affected.
According to South Korea's computer emergency response team disclosed that this loophole at least from mid-November 2017 was found, and South Korea has been exploited to attack this vulnerability, mainly for research cooperation with South Korea and North Korea.
Adobe also acknowledges that it is aware of this exploit and recommends that users immediately upgrade to the latest version of Flash Player or update patches.