Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution

Multiple critical and high-severity vulnerabilities affecting a range of Adobe products (InDesign, InCopy, Photoshop, Illustrator including iPad, Substance 3D Stager, Adobe Format Plugins, and Adobe Pass) have been disclosed, covering issues such as use-after-free, heap-based buffer overflows, out-of-bounds reads/writes, integer underflow, and incorrect authorization. Successful exploitation of the most severe flaws could allow arbitrary code execution in the context of the logged-on user, potentially enabling program installation, data access/modification, or account creation depending on user privileges.