Adobe Addresses 140 Vulnerabilities in Major Software Update

• •Adobe patched 140 vulnerabilities across 10 products, including critical flaws.
• •ColdFusion and Content Credentials SDK had the highest number of vulnerabilities fixed.
• •No known exploitation of these vulnerabilities has been reported.

Adobe has released 10 security advisories detailing the patching of approximately 140 vulnerabilities across its products. Notably, Adobe ColdFusion received updates for 32 vulnerabilities, including critical flaws that could lead to code execution and privilege escalation. The Content Credentials SDK was patched for 30 vulnerabilities, many of which are high-severity and could allow security feature bypasses. Adobe Photoshop had 18 vulnerabilities fixed, primarily allowing arbitrary code execution. Other products like Substance 3D Stager and Adobe Commerce also had multiple critical vulnerabilities addressed. Adobe has not reported any in-the-wild exploitation of these vulnerabilities, and most advisories have a priority rating of 3, indicating low expected exploitation risk. The company has shifted to a twice-monthly schedule for security bulletins due to the increased volume of vulnerabilities discovered, aided by AI models in their code review process.