Microsoft and Adobe Patch Tuesday, August 2025 Security Update Review | Qualys

Summary: Microsoft's August 2025 Patch Tuesday addressed 119 vulnerabilities, including 13 rated critical and 91 important, plus one zero-day that was publicly disclosed. Adobe released 13 advisories covering 68 vulnerabilities across products including Commerce, Photoshop, Illustrator, and InDesign, with 38 rated critical.
What's compelling: The Windows Kerberos path traversal flaw lets an authenticated attacker gain domain administrator privileges over a network, and the Windows Message Queuing use-after-free allows an unauthenticated attacker to reach remote code execution if they win a race condition.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026