Adobe Flash Player 18 has been released (18.0.0.160)

These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system.

Direct downloads (no bundled junk) for Windows 7 and earlier :emotion-30::

Internet Explorer -  http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_18_active_x.exe

Plugin-based browsers (Firefox etc) - http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_18_plugin.exe

Uninstaller (if needed) : http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe 

Documentation :  https://helpx.adobe.com/security/products/flash-player/apsb15-11.html 

https://helpx.adobe.com/flash-player/release-note/fp_18_air_18_release_notes.html

=====================================================================

( :emotion-30: Note:  Users of IE10/11 on Win8/8.1 will receive a proprietary Flash update directly from Microsoft.   These will be documented as https://support.microsoft.com/en-us/kb/3065820   )

Adobe AIR 18 (for those who have/use AIR) has been released 18.0.0.144

https://get.adobe.com/air/

The following 2 updates are rated CRITICAL:

MS15-056 Cumulative Security Update for Internet Explorer (3058515) 

MS15-057 Vulnerability in Windows Media Player Could Allow Remote Code Execution (3033890) 

=================================

The following 6 updates are rated IMPORTANT:

MS15-059 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3064949) 

MS15-060 Vulnerability in Microsoft Common Controls Could Allow Remote Code Execution (3059317) 

MS15-061 Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (3057839) 

MS15-062 Vulnerability in Active Directory Federation Services Could Allow Elevation of Privilege (3062577

MS15-063 Vulnerability in Windows Kernel Could Allow Elevation of Privilege (3063858) 

MS15-064 Vulnerabilities in Microsoft Exchange Server Could Allow Elevation of Privilege (3062157)  

===================

Observation:   MS15-058 ???   Probably an indication of something that was planned, but had to be pulled at the last moment?

WARNING:  The link for this separate download of the MSRT is now pre-checking a box to also download "MSN default homepage & Bing default search engine".    Be sure to uncheck this, unless you really want it!

Malicious Software Removal Tool (MSRT, MRT) for June, version 5.25  

http://www.microsoft.com/en-us/download/malicious-software-removal-tool-details.aspx 

Reminder:   Users who are paranoid about the remote possibility of a FP can opt to run this tool from a Command Prompt, appending a   /N   parameter [for "detect only" mode].

=================================================================

Remark:  The MSRT still runs under WinXP (through July 2015)

=================================================================

This month's MSRT adds detection/removal of:

Win32/Gatak- "a trojan that gathers information about your PC and sends it to a hacker.  It can arrive on your PC as part of a key generator application, or by appearing to be an update for a legitimate application".

Win32/OnlineGames - "a malware family which includes trojans that might try to do one or all of the following:

• Steal your online game credentials
• Steal your virtual in-game property
• Modify your web browser or browser settings
• Download and install other malware
• Use your computer for click fraud
• Record your keystrokes and the sites you visit
• Send information about your PC, including user names and browsing history, to a remote malicious hacker
• Give a remote malicious hacker access to your PC"

Win32/BrobanDel- "A family of threats that can modify Boleto Bancário - a common payment method in Brazil.  They can be installed on your PC when you open a malicious spam email attachment."

Win32/Bagopos- "A family of Malware that can steal your sensitive information, including your credit card details."

=============================================================

For additional details/information, see http://blogs.technet.com/b/mmpc/archive/2015/06/09/msrt-june-2015-brobandel.aspx

Related articles on the Flash updates:

http://www.computerworld.com/article/2933384/security/adobe-fixes-flash-player-flaws.html   

"history has shown that attackers are quick to target new Flash flaws after a fix becomes available for them".

-----------------------------------------------------------------------------------------------------------------------

http://www.pcmag.com/article2/0,2817,2485673,00.asp 

"Adobe Flash malware attacks are on the rise... [as] Attackers' attention appears to have been diverted from Java and Microsoft Silverlight to un-patched Flash vulnerabilities".

Remark:   Firefox 38.0.6 --- which was mirrored (pre-released) by MajorGeeks two days ago (8 June) --- has still  not  been officially released by Mozilla.

There are some reports that KB3058515, the cumulative security update for IE, is failing (and/or being repeatedly offered) under Win7:

http://news.softpedia.com/news/Windows-Update-KB3058515-Installation-Fails-with-Error-80092004-on-Windows-7-483948.shtml

http://news.softpedia.com/news/Windows-Update-KB3058515-Says-It-s-Installed-but-It-s-Not-More-Info-on-Error-80092004-483983.shtml

-----------
For what it's worth, I've installed it on about 12 Win7 systems (10 32-bit & 2 64-bit) without encountering this issue.

I haven't been offered KB3058515 (Win 7 Pro, x86) a second time and it is shown as "successful' in the update history.

That said, like last month, I've been offered the current MSRT for a second time even though it was installed and run on Update Tues.

If I manually launch mrt.exe, it says MSRT- June 2015 at top of that window, so I know it got installed the first time and it is working.

I hid the second coming... :emotion-4: