Adobe released three updates for October. The first update covers 12 CVEs in Flash – two of which were submitted through the ZDI program. While the update is marked is critical, there’s no indication any of these bugs are being actively exploited.
Adobe also released a critical patch for Acrobat and Reader fixing a whopping 71 CVEs – 32 of which came through the ZDI program. Similar to Flash, none of these issues are reported to be actively exploited. Two of these bugs – CVE-2016-6944 and CVE-2016-6945 – were submitted by ZDI’s own AbdulAziz Hariri and are October’s Bug of the Month.
