Adobe Patches A Number of Critical Vulnerabilities In Latest Update

If you make frequent use of Adobe products, you’ll definitely want to prioritize applying the latest security update offered by the company. It’s an out of band patch that impacts ten different products in the Adobe lineup and is aimed squarely at addressing several critical security flaws. Since this is a big update, released outside the company’s normal schedule, let’s start by looking at exactly which products are impacted.

These include:

• Dreamweaver
• Marketo
• Animate
• Illustrator
• After Effects
• Photoshop
• Media Encoder
• InDesign
• Creative Cloud
• Premiere Pro

Right off the bat, then, if you use any of the products listed above in either a Windows or macOS environment, this patch is for you.

As to the particulars, the updates address too many issues listed as serious or critical to go into any detail. However, in Illustrator, for example, the patch addresses seven different critical security vulnerabilities.

In Dreamweaver, you’ll find a pair of serious issues addressed, including an uncontrolled search path element flaw, and similar bugs were addressed in Premiere Pro, Photoshop, Media Encoder and Creative Cloud. The company addressed a critical cross-site scripting bug on the Marketo front that could have allowed an attacker to deploy a poisoned JavaScript inside a browser section.

Where Animate is concerned, four different critical vulnerabilities were addressed, all of which could have resulted in arbitrary code execution. With InDesign, the company addressed a critical memory corruption bug.

In short, this is a massive, important update. It also didn’t happen in isolation. When the company released the update, they thanked a raft of security research firms for their efforts and disclosures. Again, if you use any of the Adobe products listed above, this is a security update you won’t want to miss.