Microsoft, Adobe Push Critical Fixes
Summary: Adobe issued a critical Flash Player update fixing at least three security holes and bringing Flash to version 14.0.0.145 on Windows, Mac and Linux, while Microsoft released six security updates addressing 29 vulnerabilities in Windows and Internet Explorer. Twenty-four of the 29 Microsoft flaws are fixed in a single Internet Explorer patch, including a weakness in how IE checks Extended Validation SSL certificates that had already been publicly disclosed before the bulletins.
What you should know: One of the 24 IE flaws was already public before the patch shipped, and Adobe said it was not aware of exploits in the wild for the Flash bugs it fixed - meaning the window between disclosure and exploitation was already open on at least one of these holes.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026