Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution

Adobe advisory describing multiple vulnerabilities across several products (Experience Manager, Acrobat/Reader, InDesign, Commerce, Substance 3D, and others) including memory-corruption flaws, use-after-free, integer overflows, and many XSS and authorization issues. The most severe could allow arbitrary code execution as the logged-on user, potentially enabling installation of programs, data access/modification, or account creation depending on user privileges; the bulletin does not report active exploitation.