UNpatched Windows Privilege Escalation Vulnerability + Flash exploits

Question

The following has been copied/pasted from http://secunia.com/advisories/64146/ (which, while free, requires registration to view):
A [0-day] vulnerability has been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges.
The vulnerability is caused due to an unspecified error. No further information is currently available.
Note: Reportedly, the vulnerability is being currently exploited in limited, targeted attacks .
=====================================================================
The following has been copied/pasted from https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html
FireEye Labs recently detected a limited APT campaign exploiting [a combination of] zero-day vulnerabilities in Adobe Flash and a brand-new one in Microsoft Windows...
While there is not yet a patch available for the Windows vulnerability, updating Adobe Flash to the latest version [17.0.0.169] will render this in-the-wild exploit innocuous.
It is therefore prudent for anyone who has not updated an older Flash (<=17.0.0.134) do so expeditiously.
===================================
EDIT:  (With acknowledgement to "Puppy" at the Lenovo Forum)
It seems that even the newest version of Flash (x.169) is no longer secure:
On April 14th 2015, Adobe patched CVE-2015-0359 in APSB15-06. On April 17th, just 3 days later, a new version of the Angler Exploit Kit (EK) was released that targets the patched vulnerability.
https://www.fireeye.com/blog/threat-research/2015/04/angler_ek_exploiting.html

Answer 1

Hi colbabomb, I rarely visit sites that use QuickTime (e.g., Apple). The problem pages used Flash (such as the page with the video of last Monday's SuMo meeting).