Adobe, Microsoft Push Critical Updates
Summary: Adobe and Microsoft each released updates on Tuesday to fix critical vulnerabilities, with Adobe patching 29 security holes in Flash Player and Microsoft issuing 14 patch bundles covering at least 50 flaws in Windows and associated software, including a zero-day bug in Internet Explorer. Half of Microsoft's updates carried its most dire "critical" rating, meaning they could be exploited to install malicious software with no user action beyond visiting a hacked or booby-trapped website.
What's compelling: A zero-day in Internet Explorer and 29 flaws in Flash mean exploitation can require nothing more than a user visiting a compromised site, and the source notes the Flash distribution page says it will go dark at the end of the month.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026