Microsoft Pushes a Dozen Security Updates
Summary: Microsoft released a dozen security updates for supported Windows versions, five of which fix flaws that could compromise PCs with little or no user interaction, and five of which address vulnerabilities disclosed publicly before the patch date. Among them are a critical Windows graphics component fix tied to CVE-2015-2546 that Shavlik says is being exploited in the wild, a large Internet Explorer update correcting 17 flaws, a Microsoft Edge fix, and a Windows Media Player patch for CVE-2015-2509 and CVE-2015-2504; Adobe separately updated Shockwave Player to v. 12.2.0.162.
What's compelling: One of the publicly disclosed flaws, CVE-2015-2546 in a Windows graphics component, is already being exploited in the wild, so the gap between disclosure and exploitation is not theoretical for anyone running unpatched Windows.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2015-2504CVE-2015-2509CVE-2015-2546
- Related
- CVE-2015-2546: Microsoft Win32k Memory Corruption Vulnerability Known Exploited Vulnerabilities · Mar 15, 2022Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026