Fixed flaws in Microsoft, Adobe, Apple and Foxit products: what to monitor and patch
Cisco Talos has disclosed flaws already fixed in Windows, Photoshop, macOS and Foxit Reader, including remote code execution in Foxit Reader and privilege escalation in Windows and Photoshop.
Source: Vulnerabilidades em produtos da Microsoft, Adobe, Apple e Foxit (blog.talosintelligence.com). Text prepared with AI from this source.
What happened and what to do
The Cisco Talos advisory, published on 7 October 2026, describes flaws already fixed by vendors in Microsoft, Adobe, Apple and Foxit products. In Photoshop, TALOS-2026-2360 (CVE-2026-48388) allows privilege escalation in the Photoshop_Set-Up.exe 2.11.0.30 installer through file replacement. On macOS, TALOS-2026-2376 is an information disclosure flaw in CoreWLAN, version 26.3.1. In Foxit Reader 2026.1.1.36485, TALOS-2026-2420 (CVE-2026-57256) allows remote code execution through a malformed file, and TALOS-2026-2446 (CVE-2026-91799) is a use-after-free triggered by JavaScript in a malicious PDF. In Windows, there are flaws in NETIO.sys leading to information disclosure through a malformed IRP, flaws in the Cloud Files Mini Filter Driver (TALOS-2026-2426 and TALOS-2026-2445) causing privilege escalation and type confusion via the Cloud Filter API, and an out-of-bounds read in tcpip.sys (TALOS-2026-2427).
For a company, the first step is an inventory confirming which Photoshop, Foxit Reader, macOS and Windows versions are in use and whether fixes are applied. Next, an endpoint telemetry pipeline can flag processes making anomalous Cloud Filter API calls, Photoshop installer runs that replace files, and PDF openings that trigger JavaScript in the reader. Snort rules cited in the advisory can be integrated into network sensors, and alerts can feed an exposure dashboard by product and version. Where operations require it, incoming PDFs can go through isolated analysis before reaching users, and restricting JavaScript in PDF readers reduces the attack surface.
How the consultancy can help
Diagnosis of exposure to these flaws across workstations and servers, with an inventory by product and version, patch verification and prioritisation. Implementation of endpoint and network telemetry collection and monitoring, with alerts and an exposure dashboard, operated in the client's environment.
Next step
Send a short description of your environment: which Microsoft, Adobe, Apple and Foxit products you use and how endpoints are managed. Wendelmaques will then prepare an initial diagnosis and a scoped proposal for your case.
Consulting for your project
Infrastructure review, deployment and ongoing operations, with scope and pricing defined in the proposal.
Quoted per project
Request a proposal