Microsoft, Adobe, Apple, and Foxit vulnerabilities
Summary: Cisco Talos disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft products, all of which the vendors have patched. The flaws include privilege escalation in Adobe Photoshop's installer (CVE-2026-48388), information disclosure in macOS CoreWLAN, remote code execution and use-after-free issues in Foxit Reader (CVE-2026-57256, CVE-2026-91799), and out-of-bounds and use-after-free flaws in the Windows NETIO.sys, tcpip.sys, and Cloud Files Mini Filter drivers.
What's compelling: The Windows Cloud Files Mini Filter Driver alone carries two of the disclosed flaws - a use-after-free (CVE-2026-58613) and a type confusion (CVE-2026-80093) - both reachable through Cloud Filter API calls and both leading to privilege escalation, so the patch window on endpoints is the stake here.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-48388CVE-2026-49177CVE-2026-50475CVE-2026-57256CVE-2026-58613CVE-2026-80093CVE-2026-91799
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026