Critical Security Updates from Microsoft, Apple

Summary: Microsoft and Apple released security updates on October 11, 2011, with Microsoft fixing at least 23 vulnerabilities in Windows and other products and Apple addressing more than 75 flaws in the Windows version of iTunes. Nine of Microsoft's 23 fixes are rated critical, eight of them in Internet Explorer, and three of the vulnerabilities were disclosed publicly before the patches, including a Windows Media Center flaw Microsoft expects attackers to exploit reliably.
What's compelling: Three of the fixed flaws were already public before patch day, and Microsoft believes crooks will soon figure out how to reliably exploit the Windows Media Center bug - so the window between disclosure and working attack code is closing on anyone who delays installation.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026