Adobe Updates
2669Warning Date
Severity Level
Warning Number
Target Sector
10 February, 2021
● Critical
2021-2448
All
Description:
Adobe has released a security updates to address several vulnerabilities in the following products:
- Adobe Dreamweaver
- Version 20.2, 21.0
- Illustrator 2021
- 25.1 and earlier versions
- Adobe Animate
- 21.0.2 and earlier versions
- Photoshop 2020
- 21.2.4 and earlier versions
- Photoshop 2021
- 22.1.1 and earlier versions
- Magento Commerce
- 2.4.1 and earlier versions
- 2.4.0-p1 and earlier versions
- 2.3.6 and earlier versions
- Magento Open Source
- 2.4.1 and earlier versions
- 2.4.0-p1 and earlier versions
- 2.3.6 and earlier versions
- Acrobat DC
- 2020.013.20074 and earlier versions
- Acrobat Reader DC
- 2020.013.20074 and earlier versions
- Acrobat 2020
- 2020.001.30018 and earlier versions
- Acrobat Reader 2020
- 2020.001.30018 and earlier versions
- Acrobat 2017
- 2017.011.30188 and earlier versions
- Acrobat Reader 2017
- 2017.011.30188 and earlier versions
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Unauthorized disclosure of information
- Execute arbitrary code
- Code injection
- Cross-site scripting (XSS)
Best practice and Recommendations:
The CERT team encourages users to review Adobe security advisory and apply the necessary updates:
- https://helpx.adobe.com/security/products/dreamweaver/apsb21-13.html
- https://helpx.adobe.com/security/products/illustrator/apsb21-12.html
- https://helpx.adobe.com/security/products/animate/apsb21-11.html
- https://helpx.adobe.com/security/products/photoshop/apsb21-10.html
- https://helpx.adobe.com/security/products/magento/apsb21-08.html
- https://helpx.adobe.com/security/products/acrobat/apsb21-09.html