Microsoft & Adobe Issue Urgent Patches for 42 Security Vulnerabilities
Microsoft 365 and Adobe have issued critical security updates to address several vulnerabilities that could leave users exposed to cyber threats. The patches, released on September's Patch Tuesday, address a total of 42 unique issues.
Microsoft's MS14-052 bulletin is particularly concerning, fixing a zero-day vulnerability (CVE-2013-7331) that can leak sensitive information about targeted machines. This vulnerability, along with 36 others allowing Remote Code Execution (RCE), could be exploited by attackers through malicious webpages or documents. Another 'Important' issue, MS14-053, fixes a denial-of-service condition on ASP.NET webservers.
Adobe's APS14-21 patch for Adobe Flash is rated 'Critical', allowing for RCE with secondary vectors through Microsoft Office documents. Meanwhile, Microsoft's MS14-054 bulletin addresses a local elevation of privilege issue that could allow malware to elevate its privileges on target systems. Additionally, MS14-055 fixes an issue in Lync server that could cause denial-of-service conditions.
Recent research highlights the growing threat of the Angler Exploit Kit, which uses Flash exploits to inject malware into browsers without writing files to disk. This toolkit, developed by cybercriminal groups, significantly increases its effectiveness when Adobe Flash vulnerabilities are present.
Users are urged to apply these patches promptly to protect against potential cyber attacks. The vulnerabilities addressed are serious and could be exploited by attackers to gain unauthorized access to systems and data. Microsoft 365 and Adobe's swift response demonstrates their commitment to user security.
Read also:
- Bishkek: A Time-Capsule City of Soviet Statues and Architecture
- Mitsubishi Electric Acquires Nozomi Networks for $883M in Industrial Cybersecurity Boost
- Strengthening Defense against Multi-faceted menaces in the Age of Authority-driven Technology
- Industries Under Jeopardy Due to Multi-Accounting: Prevention Strategies Revealed in 2024
