Skip to content

Back to the catalog

Microsoft, Adobe, Apple, and Foxit vulnerabilities
blog.talosintelligence.comadvisory

Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos discloses eight vulnerabilities patched by vendors: a Photoshop installer privilege escalation (CVE-2026-48388), a macOS CoreWLAN information disclosure bug, two Foxit Reader flaws including a JavaScript CBF_Widget remote code execution (CVE-2026-57256) and an Array use-after-free (CVE-2026-91799), and four Windows kernel-driver bugs — NETIO.sys information disclosure (CVE-2026-50475), two Cloud Files Mini Filter Driver issues (use-after-free CVE-2026-58613 and type confusion CVE-2026-80093), and a tcpip.sys out-of-bounds read (CVE-2026-49177). Each advisory gives the affected version and trigger mechanism, and Talos notes Snort coverage is available for detection.

TL;DR Talos details eight patched RCE/UAF/privilege-escalation CVEs across Adobe Photoshop, Apple macOS, Foxit Reader, and Windows drivers.
Open original ↗

Organisations named here

  • TALOS-2026-2360
  • TALOS-2026-2376
  • TALOS-2026-2420
  • TALOS-2026-2426
  • TALOS-2026-2427
  • TALOS-2026-2443
  • TALOS-2026-2445
  • TALOS-2026-2446

CVEs named here

  • CVE-2026-48388
  • CVE-2026-57256
  • CVE-2026-91799
  • CVE-2026-50475
  • CVE-2026-58613
  • CVE-2026-80093
  • CVE-2026-49177

Technologies named here

  • Adobe Photoshop
  • Snort
  • Apple macOS
  • Foxit Reader
  • Microsoft Windows NETIO.sys driver
  • Windows Cloud Files Mini Filter Driver
  • Microsoft Windows tcpip.sys driver
  • macOS
  • Windows

Techniques named here

  • Privilege escalation via file replacement
  • Information disclosure via API call sequence
  • Remote code execution via malformed file
  • Use-after-free via malicious PDF JavaScript
  • Out-of-bounds pointer offset via crafted IRP
  • Use-after-free via Cloud Filter API calls
  • Type confusion via Cloud Filter API calls
  • Out-of-bounds read via crafted IRP

Related in AppSec