Adobe Issues Acrobat, Reader Security Patches
Summary: Adobe issued an out-of-cycle update to version 9.3.4 of Acrobat and Reader for Windows, Mac and UNIX, fixing at least two security vulnerabilities. One flaw was demonstrated at the Black Hat security conference in Las Vegas the prior month, and the release notes also reference a flaw detailed by researcher Didier Stevens in March; Adobe said it was not aware of active attacks exploiting either bug.
What's compelling: Adobe moved to a quarterly patch schedule, yet this fix shipped outside that cycle for flaws already shown publicly at Black Hat and by a named researcher months earlier - a reminder that your patch cadence and the attacker's timeline are not the same clock.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026