Adobe updates fix 28 vulnerabilities in 6 programs

• 15 July, 2021
• No Comments

Adobe has released a giant Patch Tuesday security update release that fixes vulnerabilities in Adobe Dimension, Illustrator, Framemaker, Acrobat, Reader, and Bridge.

The complete list of Adobe Products receiving security updates today and the number of fixed vulnerabilities are below:

• APSB21-40 | Adobe Dimension: 1 Critical vulnerability was fixed.
• APSB21-42 | Adobe Illustrator: 2 Critical and 1 Important vulnerability was fixed.
• APSB21-45 | Adobe Framemaker: 1 Critical vulnerability was fixed.
• APSB21-51 | Adobe Acrobat and Reader: 14 Critical and 5 Important vulnerabilities were fixed.
• APSB21-53 | Adobe Bridge: 4 Critical and one Moderate vulnerabilities were fixed.

In total, Adobe fixed 28 vulnerabilities with today’s updates. 

Also Read: The 5 Phases of Penetration Testing You Should Know

Almost all Critical vulnerabilities could lead to arbitrary code execution, allowing threat actors to execute commands on vulnerable computers.

Out of the Adobe security updates released today, Adobe Acrobat and Reader had the most fixes, with 19 vulnerabilities.

Install updates immediately

While there were no known actively exploited zero-day vulnerabilities, Adobe advises customers to update to the latest versions as soon as possible.

This urgency is because threat actors can compare older versions of the software with the patched versions to determine what code is vulnerable and create exploits to target these vulnerabilities.

In most cases, users can update their software by using the auto-update feature of the product using the following steps:

• By going to Help > Check for Updates.
• The full update installers can be downloaded from Adobe’s Download Center.
• Let the products update automatically, without requiring user intervention, when updates are detected.

If the new update is not available via autoupdate, you can check the security bulletins linked above for the latest download links.

Also Read: How to Choose a Penetration Testing Vendor