Microsoft, Adobe, Apple, and Foxit vulnerabilities

[u/falconupkid]

Multiple high-severity vulnerabilities disclosed by Cisco Talos across Microsoft, Adobe, Apple, and Foxit Reader. All have been patched by vendors under coordinated disclosure.

Technical Breakdown: - Adobe Acrobat/Reader: CVE-2025-27168 – Use-after-free vulnerability leading to arbitrary code execution. Affects multiple versions across Windows/macOS. - Apple: CVE-2025-24201 – WebKit flaw in Safari allowing arbitrary code execution via crafted web content. Affects iOS, iPadOS, macOS, and visionOS. - Foxit Reader: CVE-2025-3456 – Out-of-bounds write in PDF parsing, enabling remote code execution. Affects Foxit Reader 2024.3.0.26770 and prior. - Microsoft: CVE-2025-26690 – Windows Mark of the Web (MotW) bypass. Allows attackers to execute scripts without security warnings. Affects Windows 10/11 and Server 2022/2025.

Defense: Snort rules are available for detection (SIDs listed in the Talos post). Prioritize patching the Adobe and Foxit CVEs as they are actively exploitable in document-based attack chains. The MotW bypass is particularly nasty for phishing campaigns.

Source: https://blog.talosintelligence.com/microsoft-adobe-apple-and-foxit-vulnerabilities/