Security News > 2020 > June > Adobe Patches 18 Critical Code Execution Flaws Across Five Products
Adobe announced on Tuesday that it has patched 18 critical code execution vulnerabilities in its After Effects, Illustrator, Premiere Pro, Premiere Rush, and Audition products.
Adobe fixed five critical out-of-bounds write, out-of-bounds read and heap overflow vulnerabilities that can be exploited for arbitrary code execution in the context of the targeted user.
The company also patched five critical code execution vulnerabilities - caused by buffer errors and memory corruption issues - in Illustrator.
Three out-of-bounds read and out-of-bounds write flaws that can lead to code execution were patched in the Windows and macOS versions of the Premiere Pro video editing software.
Finally, two out-of-bounds write vulnerabilities that allow arbitrary code execution were addressed in the Adobe Audition audio recording and editing software.
News URL
Related news
- Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution (source)
- Apache fixes critical OFBiz remote code execution vulnerability (source)
- Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution (source)
- Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk (source)