Microsoft Patch Tuesday, February 2018 Edition
Summary: Microsoft released February 2018 security updates fixing at least 55 vulnerabilities across Windows, Internet Explorer/Edge, Office and Adobe Flash Player, many rated critical and remotely exploitable with little or no user interaction. The batch includes fixes for Outlook, Edge and Office flaws triggered by clicking a link or document, plus a pair of Flash vulnerabilities under active attack, and Adobe separately shipped Reader and Acrobat updates fixing at least 39 holes.
Why it matters: The Flash bugs were already being exploited in the wild when the patches shipped, so the window between disclosure and compromise was effectively zero for anyone who had not yet updated. Reader's 39 fixed holes sit on the same desktops that open every inbound PDF.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026