Adobe, Microsoft Push Critical Security Fixes
Summary: Adobe and Microsoft each released security updates on August 12, 2014: Adobe patched Reader/Acrobat, Flash Player and AIR, while Microsoft issued nine updates addressing at least 37 holes in Windows and related software. Two of Microsoft's nine bundles carried its "critical" label, and a critical Internet Explorer update covered the bulk of the flaws, including one already being exploited by attackers and another already publicly disclosed.
What you should know: One of the Internet Explorer flaws was under active attack before the patch existed, and Adobe said attackers were already targeting the single bug fixed in its Reader and Acrobat update for Windows - so the gap between disclosure and deployment is the exposure window that matters here.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026