Adobe, Microsoft Push Fixes For 0-Day Threats
Summary: Adobe issued an emergency Flash Player update, its second in just over two weeks, to fix three critical holes including one with a known exploit, bringing Flash to v. 12.0.0.70 for Linux, Mac and Windows. Separately, Microsoft released a FixIt shim tool for a previously unknown zero-day in Internet Explorer 9 and 10, which it says is subject to "limited, targeted attacks," while an official patch is still in progress.
What's compelling: Both flaws are critical, meaning a user can be compromised simply by visiting a booby-trapped or compromised website, and Microsoft's only stopgap for IE 9 and 10 carries a known side effect of increased memory use until the browser is restarted.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026