Microsoft, Adobe Ship Critical Fixes

Summary: Microsoft released updates fixing 94 flaws across its Windows operating systems and related software, 27 of which Qualys says can be exploited remotely to seize complete control with little or no user interaction. Microsoft also issued patches for older, unsupported platforms including Windows XP and Windows Server 2003, and Adobe pushed critical fixes for Flash and Shockwave.
Key Takeaway: One of the patched flaws, CVE-2017-8543, was already being exploited in the wild and Microsoft later corrected its bulletin to say the bug sits in the Windows Search service, not SMB - so an admin who blocked SMB believing that closed the vector would still be exposed without the patch.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2017-8543
Related: CVE-2017-8543: Microsoft Windows Search Remote Code Execution Vulnerability Known Exploited Vulnerabilities · May 24, 2022
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026