Adobe, Microsoft Issue Critical Security Fixes

Summary: Adobe released updates plugging at least 13 security holes in Flash Player, and Microsoft pushed out fixes for at least three dozen flaws in Windows and associated software, 23 of them in Internet Explorer. Adobe directed Flash Player Desktop Runtime users on Windows and Macintosh to version 18.0.0.160, while Chrome users on Mac systems get 18.0.0.161.
Why it matters: Flash's auto-update function tends to lag the actual patches by several days at least, and the article notes it is difficult to know which version is the latest - so the window between a fix shipping and a machine actually running it is measured in days, not minutes.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026