Adobe, Microsoft Release Critical Updates

Summary: Microsoft released seven patch bundles addressing at least 34 vulnerabilities in Windows and other software, six of them rated critical, and Adobe pushed out fixes for Flash and Shockwave. Microsoft and security experts flagged MS13-053, which fixes at least eight TrueType font flaws affecting nearly every supported version of Windows including XP, Vista, Windows 7 and Windows 8, and one component (CVE-2013-3660) is already being exploited in the wild.
Key Takeaway: A TrueType flaw that grants complete control of a Windows system just by visiting a malicious web page is already being exploited, and it reaches XP through Windows 8 - so the patch window is not theoretical for any organization still running mixed Windows estates.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2013-3129 CVE-2013-3660
Related: CVE-2013-3660: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Mar 28, 2022
Microsoft Update Tuesday: July 2013: an issue of True Type fonts Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026