Microsoft Patches Dozens of Security Holes
Summary: Microsoft released 16 patch bundles addressing at least 44 security flaws across Windows and related software, with critical ratings for Internet Explorer, Edge, and Microsoft Office, plus fixes for Windows SMB Server, DNS Server, and Exchange Server. Adobe delayed its expected Flash patch to the end of the week to address an unpatched Flash vulnerability already being exploited in active attacks, which Kaspersky linked to apparent espionage.
Bottom line: A Flash flaw was under active exploitation while its fix was still days away, and the Microsoft batch included critical IE, Edge, and Office holes that let an attacker take control of a machine through nothing more than a booby-trapped website or poisoned ad.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026