Patch Tuesday, Etc.
Summary: Microsoft released Windows security updates fixing at least four holes, one rated critical for a Windows Media Player and Media Center flaw affecting XP, Vista and Windows 7, but left an Internet Explorer vulnerability that hackers had exploited since late January unpatched, offering only a FixIt tool. Apple's iTunes update for Windows corrected more than 50 vulnerabilities, Adobe's Flash update to version 10.2.152.26 plugged at least 13 holes, and the Shockwave patch to 11.5.9.620 addressed at least 21.
Key Takeaway: The IE flaw had been actively exploited since late January and Microsoft shipped only a stopgap tool rather than a patch, while the iTunes bundle alone carried more than 50 vulnerabilities - a reminder that the third-party applications on your endpoints can carry more exposure than the operating system itself.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026