Adobe released security updates for Adobe Acrobat, Reader, InDesign, InCopy and Dimension for Windows and macOS. These updates address critical and important vulnerabilities such as application denial-of-service, arbitrary code execution, privilege escalation and memory leak.
CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary updates.
Adobe Acrobat and Reader | APSB23-01
Adobe released security updates for Adobe Acrobat and Reader for Windows and macOS. These updates address critical and important vulnerabilities. Successful exploitation could lead to application denial-of-service, arbitrary code execution, privilege escalation and memory leak.
Adobe InDesign | APSB23-07
This update addresses multiple critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution, application denial-of-service and memory leak.
Adobe InCopy | APSB23-08
This update addresses multiple critical and an important vulnerability. Successful exploitation could lead to arbitrary code execution and memory leak.
Adobe Dimension | APSB23-10
This update addresses critical and important vulnerabilities in Adobe Dimension and third-party dependencies. Successful exploitation could lead to memory leak and arbitrary code execution in the context of the current user.