Software maker Adobe on Tuesday released a massive batch of security updates alongside warnings that critical-severity vulnerabilities can be exploited to remotely take control of computer systems.
The Adobe Patch Tuesday rollout covers a total of 54 documented bugs and addresses major code execution defects in enterprise-facing products like Adobe ColdFusion, Adobe FrameMaker, Adobe Photoshop and Adobe Commerce.
The company called urgent attention to a fix for the ColdFusion web development platform, warning that at least 15 documented vulnerabilities put organizations at risk to arbitrary file system read, arbitrary code execution and security feature bypasses.
Adobe ranked eleven of the ColdFusion issues as critical with CVSS scores ranging from 7.5 to 9.1 and described the bugs as improper input validation, deserialization of untrusted data, and authentication weaknesses that could lead to arbitrary code execution or file system reads.Â
The patches also provide cover for five documented security holes in the Adobe Commerce platform with a note from Adobe that these bugs expose users to privilege escalation, denial-of-service and security bypass attacks.
The Adobe ColdFusion and Adobe Commerce software products are oft-targeted by malicious hackers, including nation-state APT groups.
The company also urged users of the Adobe Premiere Pro product to immediately apply available fixes to ward off remote code execution attacks.
The San Jose, Calif. company also pushed out software fixes for seven vulnerabilities in Adobe After Effects and a pair of critical, code execution issues in the Adobe Media Encoder software.
The updates also cover flaws in Adobe Bride, Adobe AEM Forms, Adobe Photoshop, Adobe Animate, and Adobe FrameMaker.Â
Related: Critical Code Execution Bugs in Adobe Acrobat and Reader
Related: Adobe Plugs 45 Security Holes, Warns of Code Execution Risks
Related: Adobe: Critical Code Execution Flaws in Photoshop
Related: Adobe Patches ColdFusion Flaw at High Risk of Exploitation
Related: CISA Warns of Exploited Adobe ColdFusion, Windows Vulnerabilities
About The Author
Original post here
