Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been disclosed across a wide range of Adobe products (including Experience Manager, Acrobat/Reader, After Effects, Media Encoder, Illustrator, Animate, InDesign, Connect, Substance 3D suite, Photoshop, Bridge, Premiere Pro, FrameMaker, and PDFL SDK). The advisory lists numerous CVEs and categories of flaws—such as arbitrary code execution, stored and reflected XSS, buffer overflows, use-after-free, out-of-bounds read/write, improper authorization/access control, SSRF, and open redirects—potentially enabling code execution or other impacts on affected installations.