Critical Updates for Flash Player, Microsoft Windows
Summary: Adobe and Microsoft each released security updates in December 2012: Microsoft issued seven update bundles fixing at least 10 vulnerabilities in Windows and other software, and Adobe fixed at least three critical flaws in Flash Player and AIR. Most of Microsoft's fixes are rated critical, covering Internet Explorer 9 and 10, the Windows kernel, Word, Exchange Server, and a Windows XP, Vista and 7 file-handling flaw that could allow remote code execution.
Bottom line: The Microsoft flaws are critical, meaning malware could seize control of vulnerable systems with little or no help from users, and the article notes Adobe's automatic Flash updater left some systems unpatched weeks after a release, so the update only counts if it actually lands.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026