Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been disclosed in a range of Adobe products (Bridge, Connect, InDesign, Premiere Pro, Substance 3D Modeler, AEM Forms, Content Credentials SDK), including buffer overflows, out-of-bounds read/write, SQL injection, stored/reflected XSS, SSRF, path traversal, improper validation/authorization, and other flaws (many tracked by CVE identifiers). The advisory notes that the most severe issues could allow arbitrary code execution as the logged-on user, with impact dependent on user privileges.