Adobe Ships Security Patches, Auto-Update Feature
Summary: Adobe issued more than a dozen security updates for Acrobat and PDF Reader, and changed the Reader updater so the pre-selected option is now "Install Updates Automatically." The update fixes at least 13 security holes, including a Flash Player zero-day patched the prior week that is also present in Reader and Acrobat, and Adobe shipped a second Flash update in under a week for a critical flaw in Flash Player 10.3.181.23 and earlier.
Key Takeaway: Adobe's own statement in the piece says the vast majority of attacks it sees exploit installations that are not current with the latest security updates - which is the population that auto-update is meant to close, and the one your inventory still has to account for.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026