Adobe, Microsoft Push Critical Security Fixes
Summary: Adobe and Microsoft released security updates on the same day, with Microsoft issuing eight patch bundles covering 26 vulnerabilities in Windows and other software, including two zero-day bugs in Internet Explorer. Adobe's update fixes a single critical flaw in Acrobat and Reader for Windows, bringing those products to version 11.0.05, while Microsoft's MS13-080 addresses the IE zero-day CVE-2013-3893 that Microsoft first warned about on Sept. 17, plus nine other browser flaws.
Why it matters: Exploit code for the IE zero-day was published publicly as a Metasploit module, and Trustwave Spiderlabs confirmed attackers are already exploiting a second IE flaw (CVE-2013-3897) fixed in the same bundle - so the window between patch release and active attack has already closed for unpatched systems.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2013-3893CVE-2013-3897
- Related
- CVE-2013-3893: Microsoft Internet Explorer Resource Management Errors Vulnerability Known Exploited Vulnerabilities · Aug 12, 2025CVE-2013-3897: Microsoft Internet Explorer Use-After-Free Vulnerability Known Exploited Vulnerabilities · Mar 03, 2022