Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos's vulnerability research team has published details on seven flaws discovered across products from Adobe, Apple, Foxit, and Microsoft, all already fixed by the vendors under Cisco's coordinated disclosure process. In Photoshop's installer (version 2.11.0.30), CVE-2026-48388 lets an attacker swap in a malicious file to gain elevated privileges, while macOS CoreWLAN (26.3.1) carries an information-leak bug reachable via a specific API call sequence, tracked as TALOS-2026-2376. Foxit Reader 2026.1.1.36485 is hit by two separate issues — a JavaScript checkbox handling flaw (CVE-2026-57256) and an Array object use-after-free (CVE-2026-91799) — both exploitable through booby-trapped PDF files to achieve remote code execution. On Windows, Talos disclosed an information-disclosure bug in the NETIO.sys driver (CVE-2026-50475) plus three issues in the Cloud Files Mini Filter Driver and tcpip.sys (CVE-2026-58613, CVE-2026-80093, CVE-2026-49177) that can be triggered through crafted API calls or network packets to cause privilege escalation, type confusion, or out-of-bounds reads. Snort rule updates covering exploitation of these bugs are available from Snort.org.