Adobe, Microsoft Ship Critical Security Updates
Summary: Adobe and Microsoft released separate security updates on January 8, 2013: Adobe fixed critical flaws in Acrobat, Reader and Flash Player, including at least 26 security problems in Acrobat and Reader, while Microsoft issued seven patches covering at least a dozen holes in Windows and other software. Microsoft did not ship an official patch for an Internet Explorer 6-8 zero-day that attackers were already exploiting, offering only a FixIt tool that researchers showed blocked only some attack methods, and Qualys CTO Wolfgang Kandek said the flaw affects 90% of the IE install base.
Why it matters: A working exploit for the unpatched IE flaw was already folded into Metasploit, and Kandek notes a large percentage of enterprises still run the affected versions - so the gap between the FixIt tool's partial coverage and a real patch is the exposure window your IE-dependent systems sit in.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026