Adobe Patch Tuesday: Critical Code Execution Flaws Patched in Commerce and Photoshop

11.10.23

Threat Intelligence Alerts

Adobe has released security updates for 13 vulnerabilities in its software, including two critical code execution flaws in Adobe Commerce and Photoshop.

The code execution flaws in Adobe Commerce (formerly Magento) could allow an attacker to take control of a vulnerable website and execute arbitrary code. The flaws relate to how Adobe Commerce processes user input and handles file uploads. The code execution flaw in Photoshop could allow an attacker to execute arbitrary code on a vulnerable system when a user opens a specially crafted PDF file. The flaw is related to the way that Photoshop processes PDF files. In addition to the code execution flaws, Adobe has patched several other vulnerabilities in its software, including cross-site scripting (XSS) vulnerabilities, denial-of-service (DoS) vulnerabilities, and privilege escalation vulnerabilities. Adobe recommends that all users update their software to the latest versions to protect themselves from these vulnerabilities.

The code execution flaws in Adobe Commerce and Photoshop are particularly dangerous because they could allow an attacker to take complete control of a vulnerable system. This could allow the attacker to install malware, steal data, or launch attacks against other systems. The XSS and DoS vulnerabilities could also be used to launch attacks against users. For example, an XSS vulnerability could be used to inject malicious code into a web page that could then be executed by users who visit the page. A DoS vulnerability could flood a website with traffic, making it unavailable to legitimate users.

The best way to protect yourself from Adobe vulnerabilities is to update your software to the latest versions. Adobe provides security updates for its software regularly. You can check for updates and install them manually or configure your software to install updates automatically. The Adobe vulnerabilities patched on Patch Tuesday are severe and could be exploited by attackers to launch attacks against users and businesses. It is essential to update your software to the latest versions and practice safe computing habits to protect yourself and your organisation from these vulnerabilities.