Adobe, MS Push Patches, Oracle Drops Drama
Summary: Adobe released a Flash Player update fixing at least 34 security vulnerabilities in Flash and Adobe AIR, and Microsoft issued 14 patch bundles, about 40 percent of which apply to Windows 10 according to a Qualys tally. Oracle CSO Mary Ann Davidson published a blog post titled "Don't, Just Don't" arguing that security researchers who reverse engineer Oracle code violate the software agreement, prompting a backlash that led Oracle to unpublish the post.
Bottom line: Two flaws fixed in Microsoft's release, CVE-2015-1642 in Office and CVE-2015-1769 in Windows, were being actively exploited in the wild according to Shavlik, and Davidson's own stated figure that Oracle finds 87 percent of its vulnerabilities itself sits against roughly 4,000 Oracle vulnerabilities logged in OSVDB.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2015-1642CVE-2015-1769
- Related
- CVE-2015-1769: Microsoft Windows Mount Manager Privilege Escalation Vulnerability Known Exploited Vulnerabilities · May 25, 2022CVE-2015-1642: Microsoft Office Memory Corruption Vulnerability Known Exploited Vulnerabilities · Mar 03, 2022Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026