Adobe, Microsoft Plug Critical Security Holes
Summary: Adobe and Microsoft released patches on Tuesday for critical vulnerabilities, with Microsoft's bundle fixing close to 80 security problems in Windows and related software, including two flaws already exploited in active attacks. Adobe's new Flash Player version 27.0.0.130 for Windows, Mac and Linux corrects two critical bugs that could let attackers seize remote control of vulnerable computers without user help.
Key Takeaway: One of the two zero-days, CVE-2017-8759 in Microsoft's .NET Framework, is being actively exploited yet is labeled only "important" rather than "critical" - and the BlueBorne Bluetooth flaw (CVE-2017-8628) is estimated to affect over five billion devices, with roughly 40% of Bluetooth-enabled devices never receiving a patch because they are outside their support window.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2017-8628CVE-2017-8759
- Related
- CVE-2017-8759: Microsoft .NET Framework Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021SWEED: Exposing years of Agent Tesla campaigns Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026