Critical Fixes Issued for Windows, Java, Flash

Summary: Microsoft released 13 updates addressing roughly three dozen unique security vulnerabilities, including critical fixes for Internet Explorer and Microsoft Edge, with four Edge flaws sharing the same vulnerability identifiers as IE code. Adobe fixed at least 22 security holes in Flash Player (version 20.0.0.306 for most Windows and Mac users), and Oracle issued an unscheduled Java SE 8 Update 73 fixing a DLL side-loading bug that lets malicious applications hijack Java's legitimate system processes.
What's compelling: Fixing Flash completely requires updating three separate installs - Flash for IE, Chrome, and Firefox - to close all 22 vulnerabilities, and the DLL side-loading flaw in Java lets attackers skip the step of convincing a user to double-click a malicious file.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026