Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution

Multiple critical and high-severity vulnerabilities affecting numerous Adobe products are disclosed, including CVEs that may enable arbitrary code execution (heap-based buffer overflows, out-of-bounds reads/writes, double free, NULL pointer dereference, write-what-where, integer underflow) and an SSRF in Adobe Commerce. The report enumerates CVE IDs per product and maps the issues to ATT&CK (Execution — Exploitation for Client Execution); no information about active exploitation is provided.