Enterprise software maker Adobe on Tuesday rolled out fixes for a wide swathe of critical security flaws across product lines, including code execution issues in the Adobe Commerce software suite.
As part of its regular Patch Tuesday rollout, Adobe documented a total of 48 security bugs and called urgent attention to critical-severity bugs in the Adobe Commerce and Magento Open Source platforms, the InDesign and Photoshop suites, and the Illustrator and Substance 3D Painter products.
Adobe stressed the importance of fixing the Adobe Commerce bug, which carries a CVSS severity score of 7.8 and exposes e-commerce shops to code execution attacks.
The bug, tagged as CVE-2024-49521, impacts versions 3.2.5 and earlier of the Commerce Services Connector (deployed as Saas) and Adobe strongly urges users to update to version 3.2.6 to secure installations.
The company also documented a major security defect in the Adobe Photoshop software and warned that both Windows and macOS users are at risk of code execution exploitation.
The Adobe InDesign software also gets a security makeover to address six documented vulnerabilities. Adobe slapped a critical-severity rating on three of the six InDesign bugs and urged immediate remediation.
The company also recommends the immediate fixing of critical issues in Adobe Substance 3D Painter, Adobe After Effects and Adobe Audition.
Related: Adobe Patches Critical Bugs in Commerce and Magento Products
Related: Adobe Commerce Flaw Exploited to Compromise Thousands of Sites
Related: Adobe Patches Critical, Code Execution Flaws in Multiple Products
Related: Adobe Calls Attention to Massive Batch of Code Execution Flaws
