Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution

This technical summary catalogs multiple CVEs across many Adobe products (After Effects, Substance 3D Viewer/Stager, Audition, InCopy, InDesign, Connect, Dimension, Illustrator, FrameMaker, Experience Manager, ColdFusion, etc.), describing a range of memory corruption, deserialization, injection, and web vulnerabilities — some of which could enable arbitrary code execution — and references the ATT&CK technique T1203 (Exploitation for Client Execution).