Microsoft, Adobe Push Critical Security Updates
Summary: Microsoft released a Patch Tuesday bundle addressing at least 33 vulnerabilities in Windows and other products, including MS13-038, a fix for a critical Internet Explorer 8 zero-day that attackers and malware had been using to break into Windows computers. Adobe separately pushed updates for Flash Player (v. 11.7.700.202, fixing 13 vulnerabilities), Adobe Reader and Acrobat (fixing at least 27 security holes), and Adobe AIR (v. 3.7.0.1860), and said it was not aware of active exploits targeting those issues.
What's compelling: The IE8 flaw was already being exploited in the wild before the patch, and Microsoft had shipped only a stopgap Fix-it tool last week - so any unpatched IE8 system was exposed for the duration of that gap. Adobe's Reader and Acrobat updates close at least 27 holes at once, a reminder of how much attack surface a single widely deployed document reader carries.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026