Adobe Addresses 80 Vulnerabilities in Key Software Products

Securityweek

Adobe Addresses 80 Vulnerabilities in Key Software Products

First seen 10 Mar 2026, 21:26 UTC • •30.0

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 16:10 UTC

Adobe has released patches for 80 vulnerabilities across eight products, including Commerce, Illustrator, Acrobat Reader, and Premiere Pro. Less than half of these vulnerabilities have been linked to specific threat actors, with spyware vendors and China identified as leading sources of concern.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 228d ago How this analysis works

Timeline

2026-03-10

Adobe announces patch release for 80 vulnerabilities

More articles in this cluster (2)

Threat Graph

15 entities, 17 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Malware
Cross-site Scripting

Affected Platform (13)

Acrobat 2024
Acrobat DC
Acrobat Reader DC
Adobe Commerce
Adobe DNG Software Development Kit
Adobe Experience Manager
Commerce B2B
Illustrator
Magento Open Source
Premiere
Premiere Pro
Substance 3D Painter
Substance 3D Stager

Relationships

Malware targets Acrobat 2024
Malware targets Acrobat DC
Malware targets Acrobat Reader DC
Malware targets Adobe Commerce
Cross-site Scripting targets Acrobat 2024
Cross-site Scripting targets Acrobat DC
Cross-site Scripting targets Acrobat Reader DC
Cross-site Scripting targets Adobe Commerce
Malware related to Adobe DNG Software Development Kit
Malware related to Adobe Experience Manager
Malware related to Commerce B2B
Malware related to Illustrator
Malware related to Magento Open Source
Malware related to Premiere
Malware related to Premiere Pro
Malware related to Substance 3D Painter
Malware related to Substance 3D Stager

Continue Reading

PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing…

Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…