Vulnerabilities
Multiple Privilege Escalation and RCE Vulnerabilities in Adobe, Apple, Foxit, and Windows Disclosed
Cisco Talos researchers uncovered a series of critical bugs that enable privilege escalation or remote code execution across Adobe Photoshop, Apple macOS, Foxit Reader, and Microsoft Windows. Patches are available and defenders should apply them immediately while monitoring for exploitation attempts.
What happened
Cisco Talos researchers identified a set of critical bugs across Adobe Photoshop, Apple macOS, Foxit Reader, and Microsoft Windows. The flaws enable privilege escalation or remote code execution when a malicious file or crafted input is processed.
Impact
Exploits could allow an attacker to gain elevated rights on a user’s machine or execute arbitrary code from a PDF or installer. The affected components include Photoshop_Set‑Up.exe 2.11.0.30, macOS CoreWLAN 26.3.1(25D2128), Foxit Reader 2026.1.1.36485, Windows NETIO.sys, and the Cloud Files Mini Filter Driver 10.0.26100.8457.
Affected products
- Adobe Photoshop Installer – CVE‑2026‑48388
- Apple macOS CoreWLAN – CVE‑2026‑91799
- Foxit Reader – CVE‑2026‑57256 & CVE‑2026‑91799
- Microsoft Windows NETIO.sys – CVE‑2026‑50475
- Windows Cloud Files Mini Filter Driver – CVE‑2026‑58613 & CVE‑2026‑80093
Mitigation
All vendors have released patches; apply them immediately. In the interim, disable JavaScript in PDF viewers, block execution of unsigned installers, and use network IDS rules from Snort.org to detect exploitation attempts. Monitor for anomalous I/O requests and Cloud Filter API activity.
Related vulnerabilities
Fortinet Issues Mass Security Fixes for RCE and Privilege Escalation Vulnerabilities
Fortinet has released updates resolving multiple security vulnerabilities across its product portfolio, including FortiOS, FortiManager, and FortiAnalyzer. Successful exploitation could allow remote code execution, privilege escalation, and denial-of-service attacks. Network administrators should patch affected installations promptly.
Read briefing
Ubuntu Kernel Vulnerabilities - Oct 2026
Multiple vulnerabilities have been disclosed affecting the Linux kernel in Ubuntu. These vulnerabilities allow for potential remote code execution, privilege escalation, and denial-of-service conditions. Defenders should prioritize patching systems according to the provided Ubuntu Security Notices.
Read briefing
Windows License Manager Privilege Escalation Vulnerability (CVE‑2026‑62777)
Microsoft has disclosed a local privilege‑escalation flaw in the Windows License Manager component. The vulnerability could allow an attacker with local access to gain SYSTEM rights. Defenders should monitor for suspicious activity and apply the forthcoming update when available.
Read briefing
CVE-2026-70108: Windows Win32k Heap Overflow Enables Local Privilege Escalation
Microsoft disclosed CVE‑2026‑70108, a heap‑based buffer overflow in the Win32 kernel subsystem that lets an authenticated local user elevate privileges. The flaw is present in all current Windows releases until patched. Defenders should apply the latest cumulative update and monitor for anomalous privilege changes.
Read briefing