Adobe, Microsoft Each Plug 70+ Security Holes
Summary: Adobe released a patch fixing 78 security vulnerabilities in Flash Player, while Microsoft issued a dozen patch bundles addressing at least 71 flaws in Windows and associated software, three-quarters of which earned its most dire critical rating. Two of the vulnerabilities were actively being exploited, including a bug in Windows and Microsoft Office, and SANS reported that some Windows users with Outlook installed had trouble using the program after applying the updates.
Key Takeaway: Two of the flaws were already being exploited in the wild, and three-quarters of Microsoft's patches were rated critical, meaning an attacker could fully compromise a vulnerable system with no user interaction at all.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026