Unit 42 Discovers 15 New Vulnerabilities Across Microsoft, Adobe and Apple Products
Summary: Unit 42 researchers were credited with discovering 15 new vulnerabilities addressed in the latest quarterly security updates from Microsoft, Adobe and Apple. Ten of the flaws are in Microsoft products with severity ratings from low to important, four are critical Adobe Reader DC bugs allowing remote code execution, and one is an Apple cross-site scripting vulnerability that could lead to arbitrary code execution in the context of the logged-in user.
What's compelling: Four of the 15 flaws are critical remote code execution bugs in Adobe Reader DC, and the Apple XSS flaw can escalate to arbitrary code execution under the logged-in user's context. The patch for CVE-2021-1711 addresses a new type of security issue the researchers found, with technical details slated for Black Hat Asia 2021.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-1711
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026