Critical Fixes for Windows, Flash & Shockwave
Summary: Microsoft released nine patch bundles for Windows and its other products, including a cumulative Internet Explorer update fixing two critical vulnerabilities present in IE 9, 10 and IE on Windows RT, and a fix for a vulnerability in the Windows Remote Desktop Client. Adobe separately issued updates for Flash and Shockwave addressing four distinct security holes in each, bringing Flash to v. 11.7.700.169 and Shockwave to v. 12.0.2.122 on Windows and Mac.
What's compelling: The IE flaws affect virtually every version of the browser ever produced, and because IE is embedded in Windows, patching it matters even for users who never launch it directly. Krebs also notes that Windows users browsing with anything other than IE must apply the Flash patch twice, once through IE and again through the alternative browser.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026