Adobe, Microsoft Push Security Updates
Summary: Adobe released a Flash Player update to version 12.0.0.77 for Windows and Mac OS X to fix a pair of security holes, while Microsoft issued five bulletins addressing 23 distinct weaknesses across Windows, Internet Explorer and Silverlight. The IE patch is rated critical for virtually all supported versions and fixes at least 18 holes, including a flaw in IE 9 and 10 already being exploited in targeted attacks, and Microsoft also fixed a publicly disclosed bug deep in the operating system on most major Windows versions.
Why it matters: The IE exploits seen so far check for Microsoft's Enhanced Mitigation Experience Toolkit and fail to proceed if it is detected, so systems without EMET are the ones exposed to an attack already in the wild. Microsoft also stops releasing security updates for Windows XP after next month, leaving anyone still on that version without patches.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026