SECURITYWEEK NETWORK:

ICS:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Malware & Threats

Adobe Patches Critical Flaws in Reader, Acrobat

Adobe documents multiple code execution flaws in a wide range of products, including the widely deployed Adobe Acrobat and Reader software.
Adobe vulnerabilities

Software maker Adobe on Tuesday documented 35 security vulnerabilities in a wide range of products and urged users to pay immediate attention to critical-severity bugs in its widely deployed Adobe Acrobat and Reader programs.

As part of its scheduled batch of Patch Tuesday updates, Adobe patched a dozen security bugs in Acrobat and Reader and slapped a critical-severity label on several issues that expose users to code execution attacks.

According to an advisory from Adobe PSIRT, the Acrobat and Reader vulnerabilities affect both Windows and macOS users

The company said it was not aware of any exploits in the wild for any of the documented issues.

The security-themed updates also cover critical code execution vulnerabilities in Adobe Illustrator (Windows and macOS); code execution and memory leak software defects in Adobe Substance 3D Painter; an arbitrary code execution bug in Adobe Aero;  and critical issues in the Adobe Animate software.

The company also shipped patches for Adobe Framemaker and Adobe Dreamweaver (Windows and MacOS).

Advertisement. Scroll to continue reading.

Here’s a full summary Adobe’s May batch of security patches:

APSB24-29: Adobe Acrobat and Reader

  • CVE Numbers Addressed: CVE-2024-30284, CVE-2024-30310, CVE-2024-34094, CVE-2024-34095, CVE-2024-34096, CVE-2024-34097, CVE-2024-34098, CVE-2024-34099, CVE-2024-34100, CVE-2024-30311, CVE-2024-30312, CVE-2024-34101
  • Number of CVEs: 12
  • Affected Versions: 24.002.20736 and earlier, 20.005.30574 and earlier
  • Platform: Windows, macOS

APSB24-30: Adobe Illustrator

  • CVE Numbers Addressed: CVE-2024-20791, CVE-2024-20792, CVE-2024-20793
  • Number of CVEs: 3
  • Affected Versions: 28.4 and earlier, 27.9.3 and earlier
  • Platform: Windows, macOS

APSB24-31: Adobe Substance 3D Painter

  • CVE Numbers Addressed: CVE-2024-30274, CVE-2024-30307, CVE-2024-30308, CVE-2024-30309
  • Number of CVEs: 4
  • Affected Versions: 9.1.2 and earlier
  • Platform: All

APSB24-33: Adobe Aero

  • CVE Number Addressed: CVE-2024-30275
  • Number of CVEs: 1
  • Affected Versions: 0.23.4 and earlier
  • Platform: Windows, macOS

APSB24-35: Adobe Substance 3D Designer

  • CVE Number Addressed: CVE-2024-30281
  • Number of CVEs: 1
  • Affected Versions: 13.1.1 and earlier
  • Platform: All

APSB24-36: Adobe Animate

  • CVE identifiers: CVE-2024-30282, CVE-2024-30293, CVE-2024-30294, CVE-2024-30298, CVE-2024-30295, CVE-2024-30296, CVE-2024-30297
  • Number of CVEs: 7
  • Affected Versions: 23.0.5 and earlier, 24.0.2 and earlier
  • Platform: Windows, macOS

APSB24-37: Adobe FrameMaker

  • CVE Numbers Addressed: CVE-2024-30283, CVE-2024-30286, CVE-2024-30287, CVE-2024-30288, CVE-2024-30289, CVE-2024-30290, CVE-2024-30291, CVE-2024-30292
  • Number of CVEs: 8
  • Affected Versions: 2020 Release Update 5 and earlier, 2022 Release Update 3 and earlier
  • Platform: Windows

APSB24-39: Adobe Dreamweaver

  • CVE Number Addressed: CVE-2024-30314
  • Number of CVEs: 1
  • Affected Versions: 21.3 and earlier
  • Platform: Windows, macOS

Related: Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS

Related: Exploited Chrome Zero-Day Patched by Google

Related: SAP Patches Critical Vulnerabilities in CX Commerce, NetWeaver

Related: VMware Patches Vulnerabilities Exploited at Pwn2Own 2024

Written By

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

More from

Latest News

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Virtual Event: Attack Surface Management Summit 2026
September 16, 2026

Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.

Register

Webinar: Minimum Viable Business: Can You Prove Your Organization Would Recover?
September 2, 2026

In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.

Register

People on the Move

Zero Networks has named Yossi Dagan as Chief Financial Officer.

Manifold has appointed Joe Sullivan to its Board of Directors.

Patrick McKinney has joined Turing as Chief Information Security Officer.

More People On The Move

Expert Insights

Popular Topics

Security Community

Stay Intouch

About SecurityWeek

News Tips

Got a confidential news tip? We want to hear from you.

Submit Tip

Advertising

Reach a large audience of enterprise cybersecurity professionals

Contact Us

Daily Briefing Newsletter

Subscribe to the SecurityWeek Daily Briefing and get the latest content delivered to your inbox.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.