Microsoft, Adobe Push Critical Security Fixes

Summary: Microsoft released seven update bundles fixing two dozen vulnerabilities in Windows and supported software, four of them rated critical, including an Internet Explorer patch that plugs at least 14 holes. Adobe patched critical flaws in Acrobat, Reader and Flash Player, bringing Flash to v. 16.0.0.235 and fixing at least six critical bugs, one of which (CVE-2014-9163) already has an exploit in the wild.
Bottom line: One of the Flash flaws Adobe fixed this month was already being exploited, so any unpatched Flash install is a live exposure rather than a theoretical one. The IE patch alone closes at least 14 holes in the default Windows browser, and the article notes some Windows users may need to apply it twice to cover both IE and an alternative browser.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2014-9163
Related: CVE-2014-9163: Adobe Flash Player Stack-Based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Apr 13, 2022
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026