Source: www.securityweek.com – Author: Ryan Naraine
Enterprise software maker Adobe on Tuesday rolled out fixes for a wide swathe of critical security flaws across product lines, including code execution issues in the Adobe Commerce software suite.
As part of its regular Patch Tuesday rollout, Adobe documented a total of 48 security bugs and urgent attention to critical-severity bugs in the Adobe Commerce and Magento Open Source platforms, the InDesign and Photoshop suites, and the Illustrator and Substance 3D Painter products.
Adobe stressed the importance of fixing the Adobe Commerce bug, which carries a CVSS severity score of 7.8 and exposes e-commerce shops to code execution attacks.
The bug, tagged as CVE-2024-49521, impacts versions 3.2.5 and earlier of the Commerce Services Connector (deployed as Saas) and strongly urges users to update to version 3.2.6 to secure installations.
The company also documented a major security defect in the Adobe Photoshop software and warned that both Windows and macOS users are at risk of code execution exploitation.
The Adobe InDesign software also gets a security makeover to address six documented vulnerabilities. Adobe slapped critical-severity rating on three of the six InDesign bugs and urged immediate remediation.
The company also recommends the immediate fixing of critical issues in Adobe Substance 3D Painter, Adobe After Effects and Adobe Audition.
Related: Adobe Patches Critical Bugs in Commerce and Magento Products
Advertisement. Scroll to continue reading.
Related: Adobe Commerce Flaw Exploited to Compromise Thousands of Sites
Related: Adobe Patches Critical, Code Execution Flaws in Multiple Products
Related: Adobe Calls Attention to Massive Batch of Code Execution Flaws
Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Join SecurityWeek and Hitachi Vantara for this this webinar to gain valuable insights and actionable steps to enhance your organization’s data security and resilience.
The leading industrial cybersecurity conference for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.
Original Post URL: https://www.securityweek.com/patch-tuesday-critical-flaws-in-adobe-commerce-photoshop-indesign-illustrator/
Category & Tags: Malware & Threats,Vulnerabilities,Adobe,Adobe Commerce,CVE-2024-49521,Patch Tuesday – Malware & Threats,Vulnerabilities,Adobe,Adobe Commerce,CVE-2024-49521,Patch Tuesday
Views: 0
