Palo Alto Networks Researchers Discover Critical Vulnerabilities in Internet Explorer and Adobe Shockwave Player
Summary: Palo Alto Networks researchers Tongbo Luo and Bo Qu were credited with discovering new vulnerabilities in Adobe Shockwave Player and Microsoft Internet Explorer. Luo found a critical flaw in Shockwave Player versions 12.1.9.160 and earlier for Windows, detailed in Adobe's September 8, 2015 Security Bulletin, while Qu found three critical IE vulnerabilities affecting versions 6 through 11, documented in Microsoft Security Bulletin MS15-094.
What you should know: Internet Explorer versions 6 through 11 were all affected by the three flaws Qu found, and the article's own tally shows 22 IE vulnerabilities reported in June 2014 alone - a reminder of how much unpatched browser surface an organization carries when legacy IE remains in use.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026