On August 13, 2024, Adobe announced the release of critical patches addressing 72 vulnerabilities across several of its key products, including Acrobat, Illustrator, Photoshop, InDesign, and more. This significant update, part of the company’s Patch Tuesday rollout, aims to address a range of severe security flaws that could leave users exposed to potential threats such as code execution, memory leaks, and denial-of-service attacks on both Windows and macOS systems.
The vulnerabilities span multiple Adobe applications, with Acrobat and Reader among the most affected. Adobe documented 12 critical flaws in these products that could enable attackers to execute arbitrary code, escalate privileges, or cause memory leaks. Users of Acrobat DC, Acrobat 2024, and Acrobat 2020 are specifically advised to update their software to mitigate these risks. Illustrator, another major product, also received updates to address at least seven documented vulnerabilities that pose code execution threats.
In addition to Acrobat and Illustrator, several other Adobe products were included in this patch release. Adobe Dimension, Photoshop, InDesign, Bridge, and various Substance 3D applications all had critical flaws addressed in the update. These patches cover issues ranging from arbitrary code execution to memory leaks and application denial-of-service. Adobe has provided specific recommendations for updating affected versions to ensure comprehensive protection.
Adobe has not reported any incidents of these vulnerabilities being exploited before the release of the patches. The company urges all users to promptly apply the updates to safeguard their systems against potential security threats. As cyber threats continue to evolve, timely updates and proactive security measures remain crucial in protecting sensitive information and maintaining system integrity.
Reference: