Critical Updates for Windows, Flash Player

Summary: Microsoft released 14 update bundles addressing at least 34 security holes in Windows and other software, with more than a third rated critical, and Adobe separately patched at least six flaws in Flash Player, bringing it to version 10.1.82.76. Microsoft said the most dangerous critical flaws involved media file formats - Silverlight, .NET Framework, and the MPEG-Layer 3 and Cinepak codecs - plus Office bugs that could infect a PC when a user opens a specially crafted email.
What you should know: More than a third of the 34 flaws were rated critical, and the Office bugs could compromise a machine just by opening an email - while Krebs notes no online threats were actively exploiting these flaws at the time, meaning the window to patch before attackers catch up is the stake.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026