Critical Fixes from Microsoft, Adobe
Summary: Microsoft issued nine updates fixing at least 21 security holes, four of them rated critical, and Adobe released a critical Shockwave Player update covering nine vulnerabilities. At least four of the vulnerabilities were publicly disclosed before the patches, and Microsoft believes attackers are likely to quickly devise reliable exploits for at least a dozen of the 21 flaws.
What you should know: Microsoft expects working exploits for at least a dozen of these 21 flaws to appear quickly, and four were already public before the patches shipped - so the window between disclosure and attack is measured in days, not months.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026