Synthesis
Adobe has released security updates to address multiple vulnerabilities, including 6 with “high” severity in Premiere Pro, InDesign and Bridge products.
Risk
Estimated impact of vulnerability on the reference community: MEDIUM/YELLOW (63.84/100)1.
Type
Arbitrary Code Execution
Affected products and/or versions
Adobe
- Premiere Pro
- InDesign
- Bridge
Mitigation actions
In line with the vendor’s statements, it is recommended to update vulnerable products following the instructions in the security bulletins available at the links in the References section.
Unique vulnerability identifiers
Below are the only CVEs relating to vulnerabilities with “high” severity:
References
https://helpx.adobe.com/security/security-bulletin.html
https://helpx.adobe.com/security/products/premiere_pro/apsb24-46.html
https://helpx.adobe.com/security/products/indesign/apsb24-48.html
https://helpx.adobe.com/security/products/bridge/apsb24-51.html
1This estimate is carried out taking into account various parameters, including: CVSS, availability of patches/workarounds and PoC, diffusion of the affected software/devices in the reference community.
