Joel Traber AG

Top news

• TAKTISCH ZDI: Published Advisories
  ZDI-26-661: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.

  → The vulnerability directly affects Adobe Acrobat Reader DC, which is part of the company's software inventory.

• TAKTISCH ZDI: Published Advisories
  ZDI-26-672: Adobe Acrobat Reader DC PDF File Parsing Integer Underflow Information Disclosure Vulnerability

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

  → Adobe Acrobat Reader DC is used in the company, but the vulnerability only causes information disclosure with a low CVSS score of 3.3 and requires user interaction.

• TAKTISCH ZDI: Published Advisories
  ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

  The vulnerability is a local privilege escalation in the DirectX graphics kernel and is therefore primarily relevant as a building block in attack chains after an attacker has already gained a foothold.

  → The vulnerability affects the Microsoft Windows kernel driver dxgkrnl, a core component of the Windows Server 2022/2019 and Windows client systems in use at the company.

• OPERATIV Rapid7 Cybersecurity Blog
  Patch Tuesday - September 2026

  The September Patch Tuesday contains an already actively exploited Windows ALPC EoP flaw and, with 999 CVEs, exceeds all previous Microsoft Patch Tuesdays.

  → The alert describes a Windows ALPC elevation-of-privilege zero-day under active exploitation and a large Microsoft Patch Tuesday, directly affecting Microsoft Windows Server and endpoint environments.

• TAKTISCH Blog
  September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

  The September patch cycle covers 972 CVEs, including two already exploited zero-days and 113 critical vulnerabilities, which drives prioritization of Windows and Office patches.

  → The patch roundup covers numerous Microsoft Windows and Office vulnerabilities that directly affect the company's core enterprise software stack.

• RAPID7 CYBERSECURITY BLOG 08/09/2026
  Patch Tuesday - September 2026

  The September Patch Tuesday contains an already actively exploited Windows ALPC EoP flaw and, with 999 CVEs, exceeds all previous Microsoft Patch Tuesdays.

• BLOG 30/09/2026
  September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

  Microsoft patched 972 vulnerabilities in its September 2026 security update, more than double the number from August and a new Patch Tuesday record. The release includes fixes for two actively exploited zero-day vulnerabilities and 113 critical vulnerabilities. Risk is especially high in Microsoft Office, where 12 critical vulnerabilities can be exploited via the Preview Pane or Reading Pane without user interaction, as well as in unauthenticated RCE vulnerabilities across DNS, DHCP, MSMQ, NFS, and SSTP VPN. Additionally, a new proof-of-concept exploit called ShieldCrash targeting Microsoft Defender was disclosed.

• PROJECT ZERO 20/09/2026
  Windows Exploitation Techniques: Dangling COM Object Registrations

  This report describes a novel Windows LPE technique via dangling COM registrations and shows that the fix for CVE-2026-50343 was incomplete.