Adobe, Microsoft Push Critical Security Fixes
Summary: Adobe released patches for at least 56 vulnerabilities in Reader and Acrobat plus 13 flaws in Flash Player, while Microsoft issued six update bundles addressing at least 33 security problems across Windows, Office, Internet Explorer and Edge. Three Microsoft patches carried its "critical" rating, and security firm Shavlik noted four of the flaws had been publicly disclosed by someone other than Microsoft before the updates shipped. Adobe later issued an advisory warning that attackers were exploiting an unpatched vulnerability in the newly released Flash version 19.0.0.207, with another fix expected the week of Oct. 19.
What you should know: Four of the Microsoft flaws were already public before patch day, giving malware writers a head start on exploits, and Adobe confirmed the just-patched Flash release was itself under active attack with no fix until the week of Oct. 19.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026