Critical Security Fixes from Adobe, Microsoft
Summary: Adobe and Microsoft each released security updates on August 14, 2012, including an Adobe Flash Player patch for CVE-2012-1535, a critical flaw Adobe says is being exploited in limited targeted attacks via a malicious Microsoft Word document against the ActiveX version of Flash Player for Internet Explorer on Windows. Microsoft's Patch Tuesday release carried nine patch bundles, more than half rated critical, addressing at least 27 security holes in Windows and related software, topped by MS12-060 for a Microsoft Office vulnerability already being exploited in the wild.
Key Takeaway: Two of the flaws patched that day were already being exploited in live attacks, one delivered through a Word document and one in Microsoft Office, so the gap between patch release and exploitation was already closed for defenders who had not yet applied the fixes.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2012-1535
- Related
- CVE-2012-1535: Adobe Flash Player Arbitrary Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 03, 2022CVE-2012-1535: Flash 0-day In The Wild Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026