Cisco Talos Disclosure: Adobe/Apple/Foxit/Microsoft Vulnerabilities (LPE/RCE/Info Disclosure)

Vulnerability Overview Cisco Talos’ Vulnerability Discovery and Research team has recently disclosed multiple vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. These vulnerabilities have been patched by the respective vendors, in accordance with Cisco’s third-party vulnerability disclosure policy. Affected Products Adobe Photoshop Privilege Escalation Vulnerability - Vulnerability ID: TALOS-2026-2360 (CVE-2026-48388) - Description: A privilege escalation vulnerability discovered in Photoshop’s installation functionality. An attacker can exploit this vulnerability and achieve privilege escalation by replacing files and using specially crafted malformed files to trigger the flaw. Apple macOS CoreWLAN Information Disclosure Vulnerability - Vulnerability ID: TALOS-2026-2376 - Description: An information disclosure vulnerability found in macOS’s CoreWLAN functionality. An attacker can trigger this vulnerability by invoking a sequence of APIs. Foxit Reader Code Execution and Use-After-Free Vulnerabilities - Vulnerability ID: TALOS-2026-2420 (CVE-2026-57356) - Description: A code execution vulnerability discovered in the JavaScript control functionality within Foxit Reader. An attacker can trigger this vulnerability and achieve remote code execution by providing specially crafted malformed files. - Vulnerability ID: TALOS-2026-2446 (CVE-2026-91799) - Description: A use-after-free vulnerability found in the way Foxit Reader handles objects. An attacker can trigger this vulnerability by embedding specially crafted JavaScript code in a malicious PDF document, leading to memory corruption and remote code execution. Microsoft Windows Out-of-Bounds, Use-After-Free, and Type Confusion Vulnerabilities - Vulnerability ID: TALOS-2026-2443 (CVE-2026-50475) - Description: An out-of-bounds pointer offset vulnerability discovered in the Microsoft Windows driver. Specially crafted I/O Request Packets (IRPs) may lead to sensitive information disclosure. - Vulnerability ID: TALOS-2026-2426 (CVE-2026-58613) - Description: A use-after-free vulnerability found in the Windows Cloud Files Mini Filter Driver. A specially crafted sequence of Cloud Filter API calls may lead to privilege escalation. - Vulnerability ID: TALOS-2026-2445 (CVE-2026-80093) - Description: A type confusion vulnerability discovered in the Windows Cloud Files Mini Filter Driver. A specially crafted sequence of Cloud Filter API calls may lead to type confusion. - Vulnerability ID: TALOS-2026-2477 (CVE-2026-49177) - Description: An out-of-bounds read vulnerability found in the Microsoft Windows driver. Specially crafted I/O Request Packets may cause arbitrary out-of-bounds reads, leading to information disclosure or denial of service. Remediation Adobe: Patched the privilege escalation vulnerability in Photoshop. Apple: Patched the CoreWLAN information disclosure vulnerability in macOS. Foxit: Patched the code execution and use-after-free vulnerabilities in Foxit Reader. Microsoft: Patched the out-of-bounds, use-after-free, and type confusion vulnerabilities in Windows. Additional Information Related Resources: - The latest Snort.org rule sets can be downloaded to detect exploitation of these vulnerabilities. - The latest vulnerability advisories have been published on the Talos Intelligence website. Summary Cisco Talos’ Vulnerability Discovery and Research team has recently disclosed multiple critical vulnerabilities involving Adobe, Apple, Foxit Reader, and Microsoft. These vulnerabilities have been patched by the respective vendors. Users are advised to update their relevant software promptly to mitigate potential risks.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco Talos Disclosure: Adobe/Apple/Foxit/Microsoft Vulnerabilities (LPE/RCE/Info Disclosure)