US-CERT to Windows Users: Dump Apple Quicktime
Summary: US-CERT urged Windows users to uninstall Apple QuickTime after Apple stopped shipping security updates for the Windows version, citing an April 14 Trend Micro blog post by Christopher Budd. Trend Micro's Zero Day Initiative detailed two new critical, unpatched QuickTime vulnerabilities that could be used to remotely compromise Windows computers, and US-CERT stated the only mitigation is to uninstall the program.
What you should know: Two remotely exploitable QuickTime flaws now have no vendor patch coming, and the government's own guidance names uninstalling the software as the only available mitigation - leaving any Windows machine that still runs it exposed to remote compromise.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026