Adobe, Microsoft Push Critical Security Fixes
Summary: Adobe and Microsoft each released security updates on May 8, 2012: Adobe's patch fixes at least five holes in Shockwave Player, and Microsoft's bundle of seven updates corrects 23 vulnerabilities in Windows and other products, eight of them rated critical. At least three of the flaws were publicly disclosed before the release, and Microsoft said its most dire updates address a critical flaw in Word (MS12-029) and flaws in Office, Windows, .NET Framework and Silverlight tied to the same vulnerable code exploited by the Duqu malware family.
Bottom line: Microsoft patched the Windows vulnerability Duqu exploited last year, but found the same vulnerable code sitting in Office, .NET Framework and Silverlight - meaning one malware family's attack surface was wider than the original fix covered, and eight of the 23 flaws required no user interaction to exploit.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026