APSB18-25 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, macOS, Linux and Chrome OS. These updates address important vulnerabilities in Adobe Flash Player 30.0.0.134 and earlier versions. Successful exploitation could lead to arbitrary code execution in the context of the current...

APSB18-29 Security updates available for Adobe Acrobat and Reader

Adobe has released security updates for Adobe Acrobat and Reader for Windows and MacOS. These updates address critical vulnerabilities. Successful exploitation could lead to arbitrary code execution in the context of the current user...

APSB18-20 Security update available for the Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application installer for Windows. This update resolves an insecure library loading vulnerability in the installer that could lead to privilege escalation CVE-2018-5003...

APSB18-26 Security update available for Adobe Experience Manager

Adobe has released security updates for Adobe Experience Manager. These updates resolve cross-site scripting vulnerabilities rated Moderate that could result in sensitive information disclosure and an input validation bypass vulnerability rated Moderate which could allow unauthorized information...

APSB18-24 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, macOS, Linux and Chrome OS. These updates address critical vulnerabilities in Adobe Flash Player 30.0.0.113 and earlier versions. Successful exploitation could lead to arbitrary code execution in the context of the current us...

APSB18-23 Security update available for Adobe Experience Manager

Adobe has released security updates for Adobe Experience Manager. These updates resolve three Server-Side Request Forgery SSRF vulnerabilities rated Important that could result in sensitive information disclosure...

APSB18-21 Security updates available for Adobe Acrobat and Reader

Adobe has released security updates for Adobe Acrobat and Reader for Windows and macOS. These updates address critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution in the context of the current user...

APSB18-22 Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves an important authentication bypass vulnerability CVE-2018-4994, which could result in sensitive information disclosure if successfully exploited. This update also resolves an important session management vulnerability du...

APSB18-19 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, macOS, Linux and Chrome OS. These updates address critical vulnerabilities in Adobe Flash Player 29.0.0.171 and earlier versions. Successful exploitation could lead to arbitrary code execution in the context of the current us...

APSB18-09 Security Updates Available for Adobe Acrobat and Reader

Adobe has released security updates for Adobe Acrobat and Reader for Windows and MacOS. These updates address critical vulnerabilities whose successful exploitation could lead to arbitrary code execution in the context of the current user...

APSB18-17 Security updates available for Adobe Photoshop CC

Adobe has released updates for Photoshop CC for Windows and macOS. These updates resolve a critical vulnerability in Photoshop CC 19.1.3 and earlier 19.x versions, as well as 18.1.3 and earlier 18.x versions. Successful exploitation could lead to arbitrary code execution in the context of the...

APSB18-16 Security update available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address critical vulnerabilities in Adobe Flash Player 29.0.0.140 and earlier versions. Successful exploitation could lead to arbitrary code execution in the context of the curren...

APSB18-12 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application for Windows and MacOS. This update resolves a vulnerability in the validation of certificates used by Creative Cloud desktop applications CVE-2018-4991, and an improper input validation vulnerability CVE-2018-4992 tha...

APSB18-18 Security update available for Adobe Connect

An important authentication bypass vulnerability CVE-2018-4994 exists in Adobe Connect versions 9.7.5 and earlier. Successful exploitation of this vulnerability could result in sensitive information disclosure...

APSB18-08 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address critical vulnerabilities in Adobe Flash Player 29.0.0.113 and earlier versions. Successful exploitation could lead to arbitrary code execution in the context of the curren...

APSB18-13 Security update available for Adobe Digital Editions

Adobe has released a security update for Adobe Digital Editions. This update resolves an out-of-bounds read vulnerability CVE-2018-4925 rated Important, and a stack overflow vulnerability CVE-2018-4926 caused by unsafe processing of specially crafted epub files...

APSB18-10 Security updates available for Adobe Experience Manager

Adobe has released security updates for Adobe Experience Manager. These updates resolve a stored cross-site scripting vulnerability CVE-2018-4929 rated moderate, and two cross-site scripting vulnerabilities CVE-2018-4930 and CVE-2018-4931 rated important...

APSB18-14 Security updates available for ColdFusion

Adobe has released security updates for ColdFusion version 11 and the 2016 release. These updates resolve an important insecure library loading vulnerability CVE-2018-4938, an important cross-site scripting vulnerability that could lead to code injection CVE-2018-4940 and an important cross-site...

APSB18-11 Security update available for InDesign CC

Adobe has released a security update for Adobe InDesign CC. This update resolves a critical memory corruption vulnerability CVE-2018-4928 caused by unsafe parsing of a specially crafted .inx file. This update also resolves an untrusted search path vulnerability CVE-2018-4927 in the InDesign...

APSB18-15 Security update available for the Adobe PhoneGap Push plugin

Adobe has released an update for the Adobe PhoneGap Push plugin. This update resolves a Same-Origin Method Execution SOME vulnerability CVE-2018-4943 that exists in PhoneGap apps built with the affected version of the Push plugin. This vulnerability could be exploited to trick users of PhoneGap...

APSB18-05 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address critical vulnerabilities in Adobe Flash Player 28.0.0.161 and earlier versions. Successful exploitation could lead to arbitrary code execution in the context of the curren...

APSB18-07 Security update available for Adobe Dreamweaver CC

Adobe has released a security update for Adobe Dreamweaver CC. This update resolves a critical OS command injection vulnerability in the Dreamweaver URI handler on Windows CVE-2018-4924 that could result in arbitrary code execution in the context of the current user...

APSB18-06 Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves an unrestricted SWF file upload vulnerability CVE-2018-4921, which could be exploited to conduct cross-site scripting attacks. This update also resolves an OS command injection vulnerability in the Adobe Connect URI...

APSB18-04 Security updates available for Adobe Experience Manager

Adobe has released security updates for Adobe Experience Manager. These updates resolve a reflected cross-site scripting vulnerability CVE-2018-4875 rated moderate, and a cross-site scripting vulnerability CVE-2018-4876 in Apache Sling XSS protection API rated important...

APSB18-02 Security Updates available for Adobe Acrobat and Reader

Adobe has released security updates for Adobe Acrobat and Reader for Windows and Macintosh. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system...

APSB18-03 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address critical vulnerabilities that could lead to remote code execution in Adobe Flash Player 28.0.0.137 and earlier versions. Successful exploitation could potentially allow an...

APSA18-01 Security Advisory for Adobe Flash Player

A critical vulnerability CVE-2018-4878 exists in Adobe Flash Player 28.0.0.137 and earlier versions. Successful exploitation could potentially allow an attacker to take control of the affected system...

APSB18-01 Security updates available for Adobe Flash Player

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address an important out-of-bounds read vulnerability that could lead to information exposure...

APSB17-39 Security update available for Adobe Digital Editions

Adobe has released a security update for Adobe Digital Editions for Windows, Macintosh, iOS, and Android. This update addresses an XML external entity processing vulnerability rated critical that could lead to information disclosure, out-of-bounds read vulnerabilities that could lead to the...

APSB17-37 Security update available for the Adobe DNG Converter

Adobe has released a security update for the Adobe DNG Converter for Windows. This update resolves a critical memory corruption vulnerability...

APSB17-35 Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves a critical Server-Side Request Forgery SSRF vulnerability CVE-2017-11291 that could be abused to bypass network access controls. This update also resolves three input validation vulnerabilities rated Important...

APSB17-34 Security updates available for Adobe Photoshop CC

Adobe has released updates for Photoshop CC for Windows and Macintosh. These updates resolve critical vulnerabilities that could lead to code execution...

APSB17-36 Security updates available for Adobe Acrobat and Reader

Adobe has released security updates for Adobe Acrobat and Reader for Windows and Macintosh. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system...

APSB17-40 Security update available for Adobe Shockwave Player

Adobe has released a security update for Adobe Shockwave Player for Windows. This update resolves a critical memory corruption vulnerability that could lead to code execution...

APSB17-38 Security update available for InDesign

Adobe has released an update for InDesign for Windows and Macintosh. This update addresses a critical memory corruption vulnerability due to improper handling of a malformed .inx file...

APSB17-30 Security update available for ColdFusion

Adobe has released security updates for ColdFusion version 11 and the 2016 release. These updates address a critical XML parsing vulnerability CVE-2017-11286, an important cross-site scripting vulnerability CVE-2017-11285 that could lead to information disclosure and a mitigation for unsafe Java...

APSB17-25 Security update available for RoboHelp

Adobe has released a security update for RoboHelp for Windows. This update resolves an important input validation vulnerability that could be used in a cross-site scripting attack CVE-2017-3104, as well as an unvalidated URL redirect vulnerability rated moderate that could be used in phishing...

APSB17-27 Security update available for Adobe Digital Editions

Adobe has released a security update for Adobe Digital Editions for Windows, Macintosh, iOS and Android. This update resolves a critical heap buffer overflow vulnerability that could lead to code execution, seven memory corruption vulnerabilities rated important that could lead to disclosure of...

APSB17-24 Security updates available for Adobe Acrobat and Reader

Adobe has released security updates for Adobe Acrobat and Reader for Windows and Macintosh. These updates address vulnerabilities rated Critical and Important that could potentially allow an attacker to take control of the affected system...

APSB17-22 Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect for Windows. This update resolves two input validation vulnerabilities CVE-2017-3102, CVE-2017-3103 that could be used in reflected and stored cross-site scripting attacks, respectively. This update also includes a mitigation to protect users...

APSB17-19 Security updates available for Adobe Captivate

Adobe has released security updates for Adobe Captivate for Windows and Macintosh. These updates resolve a critical input validation vulnerability CVE-2017-3098 in the quiz reporting feature that could be abused to read and write arbitrary files to the server, potentially resulting in remote code...

APSB17-20 Security update available for Adobe Digital Editions

Adobe has released a security update for Adobe Digital Editions for Windows, Macintosh, iOS and Android. This update resolves critical memory corruption vulnerabilities that could lead to code execution, three vulnerabilities rated important that could lead to escalation of privilege and two memo...

APSB17-18 Security update available for Adobe Shockwave Player

Adobe has released a security update for Adobe Shockwave Player for Windows. This update addresses a critical memory corruption vulnerability that could lead to code execution...

APSB17-16 Security updates available for Adobe Experience Manager Forms

Adobe has released security updates for Adobe Experience Manager AEM Forms on Windows, Linux, Solaris and AIX. These updates resolve an important information disclosure vulnerability CVE-2017-3067 resulting from abuse of the pre-population service in AEM Forms. This issue was resolved by providin...

APSB17-14 Security update available for ColdFusion

Adobe has released security hotfixes for ColdFusion versions 10, 11 and the 2016 release. These hotfixes resolve an input validation issue that could be used in reflected XSS cross-site scripting attacks CVE-2017-3008. These hotfixes also include an updated version of Apache BlazeDS to mitigate...

APSB17-09 Security update available for Adobe Campaign

Adobe has released a security update for Adobe Campaign v6.11 for Windows and Linux. This update resolves an important input validation bypass that could be exploited to read, write or delete data from the Campaign database CVE-2017-2989...

APSB17-13 Security update available for the Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application for Windows. This update resolves an important vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications CVE-2017-3006. This update also resolves ...

APSB17-12 Security update available for Adobe Photoshop CC

Adobe has released updates for Photoshop CC for Windows and Macintosh. These updates resolve a critical memory corruption vulnerability when parsing malicious PCX files that could lead to code execution CVE-2017-3004. These updates also resolve an unquoted search path vulnerability in Photoshop o...

APSB17-11 Security update available for Adobe Acrobat and Reader

Adobe has released security updates for Adobe Acrobat and Reader for Windows and Macintosh. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system...

APSB17-08 Security update available for Adobe Shockwave Player

Adobe has released a security update for Adobe Shockwave Player for Windows. This update addresses an important vulnerability that could potentially lead to escalation of privilege...