Microsoft confirms patch for Flash in IE10 coming soon

11.09.2012
Adobe recently issued an utility to patch critical flaws that could allow an attacker to run malicious code on the target system. But, if youre using Windows 8, the version of Flash Microsoft has embedded in Internet Explorer 10 is still vulnerable. Good news, thoughan update is forthcoming to address that problem.

Adobe responds quickly to patch identified vulnerabilities, and most Windows users are conditioned to apply security updates as theyre released, but Microsoft is responsible for updating Flash in its Web browser. Windows 8 hasnt yet officially launched, though, and Microsofts initial response was that Flash would not be updated until after October 26 when Windows 8 becomes available to the general public.

A couple of the flaws addressed by Adobe were given its highest threat warning level, and are associated with attacks that are already circulating in the wild. Last week, Adobe confirmed that to these threats.

I asked Microsoft about speculation that a patch is imminent. Yunsun Wee, Director of Microsoft Trustworthy Computing replied with this statement: In light of Adobes recently released security updates for its Flash Player, Microsoft is working closely with Adobe to release an update for Adobe Flash in IE10 to protect our mutual customers.

Wee added, This update will be available shortly. Ultimately, our goal is to make sure the Flash Player in Windows 8 is always secure and up-to-date, and to align our release schedule as closely to Adobes as possible.

Microsoft isnt the first to embed its own version of Flash. Googles Chrome browser has had Flash baked in for a couple years now. However, Google has a solid track record of speeding patches to users as fast asor sometimes faster thanAdobe.