Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Malware & Threats

Adobe Patches Critical Flaws in Reader, Acrobat

Adobe documents multiple code execution flaws in a wide range of products, including the widely deployed Adobe Acrobat and Reader software.

Adobe Acrobat vulnerability exploited

Software maker Adobe on Tuesday documented 35 security vulnerabilities in a wide range of products and urged users to pay immediate attention to critical-severity bugs in its widely deployed Adobe Acrobat and Reader programs.

As part of its scheduled batch of Patch Tuesday updates, Adobe patched a dozen security bugs in Acrobat and Reader and slapped a critical-severity label on several issues that expose users to code execution attacks.

According to an advisory from Adobe PSIRT, the Acrobat and Reader vulnerabilities affect both Windows and macOS users

The company said it was not aware of any exploits in the wild for any of the documented issues.

The security-themed updates also cover critical code execution vulnerabilities in Adobe Illustrator (Windows and macOS); code execution and memory leak software defects in Adobe Substance 3D Painter; an arbitrary code execution bug in Adobe Aero;  and critical issues in the Adobe Animate software.

The company also shipped patches for Adobe Framemaker and Adobe Dreamweaver (Windows and MacOS).

Here’s a full summary Adobe’s May batch of security patches:

APSB24-29: Adobe Acrobat and Reader

Advertisement. Scroll to continue reading.
  • CVE Numbers Addressed: CVE-2024-30284, CVE-2024-30310, CVE-2024-34094, CVE-2024-34095, CVE-2024-34096, CVE-2024-34097, CVE-2024-34098, CVE-2024-34099, CVE-2024-34100, CVE-2024-30311, CVE-2024-30312, CVE-2024-34101
  • Number of CVEs: 12
  • Affected Versions: 24.002.20736 and earlier, 20.005.30574 and earlier
  • Platform: Windows, macOS

APSB24-30: Adobe Illustrator

  • CVE Numbers Addressed: CVE-2024-20791, CVE-2024-20792, CVE-2024-20793
  • Number of CVEs: 3
  • Affected Versions: 28.4 and earlier, 27.9.3 and earlier
  • Platform: Windows, macOS

APSB24-31: Adobe Substance 3D Painter

  • CVE Numbers Addressed: CVE-2024-30274, CVE-2024-30307, CVE-2024-30308, CVE-2024-30309
  • Number of CVEs: 4
  • Affected Versions: 9.1.2 and earlier
  • Platform: All

APSB24-33: Adobe Aero

  • CVE Number Addressed: CVE-2024-30275
  • Number of CVEs: 1
  • Affected Versions: 0.23.4 and earlier
  • Platform: Windows, macOS

APSB24-35: Adobe Substance 3D Designer

  • CVE Number Addressed: CVE-2024-30281
  • Number of CVEs: 1
  • Affected Versions: 13.1.1 and earlier
  • Platform: All

APSB24-36: Adobe Animate

  • CVE identifiers: CVE-2024-30282, CVE-2024-30293, CVE-2024-30294, CVE-2024-30298, CVE-2024-30295, CVE-2024-30296, CVE-2024-30297
  • Number of CVEs: 7
  • Affected Versions: 23.0.5 and earlier, 24.0.2 and earlier
  • Platform: Windows, macOS

APSB24-37: Adobe FrameMaker

  • CVE Numbers Addressed: CVE-2024-30283, CVE-2024-30286, CVE-2024-30287, CVE-2024-30288, CVE-2024-30289, CVE-2024-30290, CVE-2024-30291, CVE-2024-30292
  • Number of CVEs: 8
  • Affected Versions: 2020 Release Update 5 and earlier, 2022 Release Update 3 and earlier
  • Platform: Windows

APSB24-39: Adobe Dreamweaver

  • CVE Number Addressed: CVE-2024-30314
  • Number of CVEs: 1
  • Affected Versions: 21.3 and earlier
  • Platform: Windows, macOS

Related: Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS

Related: Exploited Chrome Zero-Day Patched by Google

Related: SAP Patches Critical Vulnerabilities in CX Commerce, NetWeaver

Related: VMware Patches Vulnerabilities Exploited at Pwn2Own 2024

Written By

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders.

Register

People on the Move

Fastly announced that Scott Lovett will join the company as Chief Revenue Officer, effective June 3, 2024.

Digital transformation consulting firm Synechron has hired Aaron Momin as CISO.

Wendy Zheng named as CFO and Joe Diamond as CMO at cyber asset management firm Axonius.

More People On The Move

Expert Insights