Adobe, Microsoft Push Critical Security Fixes
Summary: Adobe released a Flash Player update resolving a half dozen critical security holes, while Microsoft issued fixes for at least 65 vulnerabilities across Windows and associated software, including Internet Explorer, Edge, Office, the Microsoft Malware Protection Engine, Visual Studio and Azure. The Malware Protection Engine flaw, discovered by Google's Project Zero and publicly disclosed earlier in the month, had already received an out-of-band update a week before Patch Tuesday.
Why it matters: The Malware Protection Engine bug is reportedly easy to exploit and affects the scanning capabilities of Windows Defender, Microsoft Endpoint Protection and Microsoft Security Essentials - the software many organizations rely on to catch everything else.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026