Adobe, Microsoft Patch Flash, Windows

Summary: Adobe issued Flash Player and AIR updates fixing the same critical vulnerability in both products, while Microsoft's five-update June bundle addressed 23 vulnerabilities in Windows, Internet Explorer, and Office. Nineteen of the Microsoft flaws were fixed in a cumulative IE update (MS13-047), and MS13-051 covers an Office flaw already being exploited in targeted attacks that Microsoft said was reported by Google, which attributed the attacks to a nation-state organization.
What's compelling: One Office flaw was under active exploitation before a patch existed, and Google tied the attacks to a nation-state actor using targeted email lures against high-value targets - the same profile that puts an unpatched Word document in an inbox ahead of any signature.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2013-3126
Related: Microsoft Update Tuesday, June 2013: mostly about Internet Explorer Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026