Adobe has released security updates to address multiple vulnerabilities in ColdFusion and Flash Player. Exploitation could allow attackers to take control of a vulnerable system.
Oracle has released its Critical Patch Update for October 2014 to address 154 vulnerabilities across multiple products.
US-CERT encourages users and administrators to review the Oracle October 2014 Critical Patch Update and apply the necessary updates.
This month the vendor is releasing eight bulletins covering a total of 24 vulnerabilities. Thirteen of this month's issues are rated ’Critical’.
A zero-day vulnerability affecting Microsoft Windows TrueType Font (TFF) parsing is reportedly being used to gain remote access into an international organization.