Critical Updates for Windows, Flash, Java

Summary: Adobe released a Flash Player update fixing at least 22 flaws, including a zero-day (CVE-2015-3043) already being exploited, while Microsoft issued 11 update bundles covering more than two dozen bugs in Windows and associated software and Oracle patched at least 15 remotely exploitable Java flaws. Four of Microsoft's 11 bulletins are rated critical, and Oracle ended support for Java 7 after this update.
What's compelling: One of the 22 Flash flaws is already being exploited in the wild, and all 15 Java holes can be triggered remotely without any authentication - so the gap between patch release and deployment is the window attackers are counting on.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2015-3043
Related: CVE-2015-3043: Adobe Flash Player Memory Corruption Vulnerability Known Exploited Vulnerabilities · Mar 03, 2022
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026