Adobe published 10 security advisories fixing about 140 vulnerabilities across ColdFusion, Commerce, Photoshop, Substance 3D, FrameMaker, Dimension, Bridge, and the Content Credentials SDK. The biggest single batches were in ColdFusion, the Content Credentials SDK, Photoshop, and Substance 3D Stager.
Many of the bugs are arbitrary code execution or privilege-escalation issues, and Adobe says there is no sign of in-the-wild exploitation. The concentration in the shared Content Credentials SDK matters because one underlying defect can surface in more than one Adobe product, so this is a coordinated patching problem rather than a single-product cleanup.
For organizations that run several Adobe lines at once, the exposure is spread across separate update cycles, but some of it may share a common component.
Adobe ha rilasciato aggiornamenti di sicurezza per risolvere molteplici vulnerabilità, di cui 26 con gravità “critica” e 99 con gravità “alta”, nei prodotti Dimension, FrameMaker, Substance 3D, Bridge, Content Credentials SDK, Commerce, ColdFusion, Photoshop ed Experience Manager (AEM).