Follow us
You can contact the Cybersecurity Council directly for your inquiries.
Join the CSC in protecting the UAE’s national security and strategic achievements.
Follow our channels on social media.
- published 1/29/25 11:06 AM •
- updated 15 January 2025 •
- 5 Min read
Security Updates - Adobe
Alert Rating
Audience
Corporations, Government, Individuals & Families
On this page
Security Updates - Adobe
Affected Products and Vulnerabilities:
- Adobe Photoshop
- Uncontrolled Search Path Element (CVE-2025-21127) - Critical (CVSS: 7.3)
- Integer Underflow (CVE-2025-21122) - Critical (CVSS: 7.8)
- Adobe Substance 3D Stager
- Stack-based Buffer Overflow (CVE-2025-21128) - Critical (CVSS: 7.8)
- Heap-based Buffer Overflow (CVE-2025-21129) - Critical (CVSS: 7.8)
- Out-of-bounds Write (CVE-2025-21130, CVE-2025-21131, CVE-2025-21132) - Critical (CVSS: 7.8)
- Adobe Illustrator on iPad
- Integer Underflow (CVE-2025-21133, CVE-2025-21134) - Critical (CVSS: 7.8)
- Adobe Animate
- Integer Underflow (CVE-2025-21135) - Critical (CVSS: 7.8)
- Adobe Substance 3D Designer
- Out-of-bounds Write (CVE-2025-21136, CVE-2025-21138) - Critical (CVSS: 7.8)
- Heap-based Buffer Overflow (CVE-2025-21137, CVE-2025-21139) - Critical (CVSS: 7.8)
- Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code on the affected systems, potentially leading to full system compromise.
Take Action
Protect yourself
- Update Adobe Products: Immediately apply the latest security updates to all Adobe software on your system. These updates fix critical vulnerabilities and help protect your device from potential attacks.
- Enable Automatic Updates: Turn on automatic updates for your Adobe products to ensure you receive the latest security patches as soon as they are released.
Stay Connected
Follow our channels
Take Action
Spread Awareness
Share this threat to raise awareness and help others stay alert
GET INVOLVED
Make a Difference
Other Threats
20 January 2025
Critical Vulnerability in F5 Traffix SDC
A critical vulnerability has been discovered in F5 Traffix SDC, linked to Apache Tomcat, which could allow attackers to gain unauthorized access to compromised systems.
Protecting
Corporations, Government
Share in:
17 January 2025
NVIDIA has released security updates to address multiple vulnerabilities in the NVIDIA Container Toolkit and NVIDIA GPU Operator.
Protecting
Corporations, Government
Share in:
16 January 2025
Critical Vulnerability in FortiSwitch Devices
A critical vulnerability (CVE-2023-37936) has been discovered in multiple versions of Fortinet FortiSwitch devices. This vulnerability, classified as a use of hard-coded cryptographic key [CWE-321], allows a remote unauthenticated attacker in possession of the key to execute unauthorized code via crafted cryptographic request.
Protecting
Corporations, Government
Share in:
