Search here and hit enter....

Adobe launches fixes for dozens of critical bugs in 5 programs

This is the second "Batch Tuesday" this year.

Today, Adobe released the latest security updates for five of its widely used programs that correct a total of 42 newly discovered vulnerabilities, 35 of which are critical.

The first four of the five affected programs, all listed below, are exposed to at least one vulnerability in the implementation of critical arbitrary code that could allow attackers to take full control of vulnerable systems.

  • Adobe Framemaker
  • Adobe Acrobat et Reader
  • Adobe Flash Player
  • Adobe Digital Edition
  • Adobe Experience Manager
Adobe launches fixes for dozens of critical bugs in 5 programs

In short, Adobe Framemaker for Windows, an advanced document-processing program, contains 21 defects, all of which are critical serious errors, memory overflow, memory corruption, and writing problems out of bounds. , Which led to code execution attacks.

Adobe Acrobat and Reader for Windows and macOS also have 12 similar security vulnerabilities in critical code implementation, along with 3 other important information disclosures and a moderate memory leak.

As the latest update to Adobe Flash Player, one of the most notorious programs in terms of the worst security record ever, has fixed another important bug in the implementation of arbitrary code. If exploited, this flaw could allow hackers to compromise targeted Windows, macOS, Linux, and Chrome OS computers.

Adobe has also fixed a new critical bug in arbitrary code execution and a huge issue in disclosure of information in Digital Edition, another popular e-book reading software developed by Adobe.

Finally, Adobe Experience Manager - the complete content management solution for creating websites, mobile apps, and forms - this time does not have any critical flaws but has corrected a major denial of service (DoS) issue that only affects software versions 6.5 and 6.4.

Although none of this month's vulnerabilities were publicly disclosed or exploited in the wild, Hacker News still strongly recommends readers to download and install the latest versions of the affected software.

If your system does not automatically detect after the new update is available, you must manually install the update by selecting "Help → Check for updates" in your Adobe software for Windows, macOS, Linux, and Chrome OS.

In addition, some basic system security practices are also recommended, such as:

Run all programs with the least necessary privileges,
Avoid downloading or managing files from unreliable or unknown sources,
Never visit sites whose safety is unreliable or suspicious,
Prevent external network access to all critical systems, unless specified access is needed.
Add a comment ()