Adobe, Microsoft Push Critical Updates
Summary: Microsoft released 13 security updates fixing at least 39 vulnerabilities in its Windows operating systems and software, five of which allow attackers to break into systems with little user action beyond visiting a hacked website. Adobe issued updates for Reader and Acrobat but not Flash Player, which an Adobe spokesperson said would come Thursday morning.
Bottom line: Five of the flaws need no user help beyond visiting a compromised site, and the bulk of the holes sit in Internet Explorer and Edge, which Shavlik counted at 27 and 19 fixes respectively so far this year.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026