Adobe, Microsoft Issue Critical Security Fixes
Summary: Adobe and Microsoft released security updates on the same day, with Microsoft issuing eight update bundles to fix at least 13 vulnerabilities in Windows and software running on it, and Adobe patching at least six flaws in Flash Player and at least 11 in Acrobat and Reader. Microsoft's batch includes a cumulative Internet Explorer patch fixing two flaws across all supported versions and folding in an earlier emergency fix for an IE zero-day, while the Flash update brings the player to v. 13.0.0.214 on Windows and Mac and v. 11.2.202.359 on Linux.
Bottom line: The IE patch carries a fix for a zero-day that was already being exploited, and users who had blocked the VGX.DLL file via an ACL change as a workaround must undo that change before MS14-021 will install - leaving them exposed until they do.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026