February Updates from Adobe, Microsoft
Summary: Microsoft delayed its February Patch Tuesday updates until March 14, 2017, citing a last-minute issue that could impact some customers, even though an unpatched SMB flaw in Windows 8.1 and Windows 10 was already circulating with exploit code. Adobe released its usual February fixes for at least 13 critical Flash Player vulnerabilities across Windows, Mac, ChromeOS and Linux, bringing Flash to v. 24.0.0.221, and said it was not aware of any exploits in the wild for those flaws.
What you should know: CERT warned on Feb. 2 that exploit code for the Windows SMB bug was already available online, and Microsoft's answer was to wait until March 14 - a month in which every unpatched Windows 8.1 and Windows 10 system carried a flaw attackers could already run.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026