cyber.hendryadrian.com
Security News · securityweek.com

Adobe Patches 52 Vulnerabilities Across 10 Products

· Original article ↗

Summary

Adobe patched 52 vulnerabilities across 10 products, including critical code-execution and privilege-escalation flaws in Adobe Connect. The company says it is unaware of any of the flaws being exploited in the wild.

Key points

  • The updates address 52 vulnerabilities across 10 Adobe products; more than half could allow arbitrary code execution.
  • Adobe Connect received fixes for critical code-execution and privilege-escalation flaws, CVE-2026-34659 and CVE-2026-34660.
  • Adobe Commerce had the largest number of patched defects; Adobe assigned its update priority 2 because the product has previously been targeted in attacks.
  • Content Authenticity SDK received patches for 14 flaws, all of which could cause application denial of service.
  • Adobe says it is unaware of any of the patched vulnerabilities being exploited in the wild.

Article Details

Event Type
Security patch release
Impact
Adobe released patches for 52 vulnerabilities across 10 products. The flaws could enable arbitrary code execution, application denial of service, privilege escalation, security-feature bypass, memory exposure, and arbitrary file-system reads. Adobe said it was not aware of any of the vulnerabilities being exploited in the wild.

CVE

CVE-2026-34659Adobe · Adobe Connect; Adobe · Adobe Connect Desktop ApplicationIt addresses two critical-severity flaws that could be exploited for arbitrary code execution (CVE-2026-34659, CVSS score of 9.6) and privilege escalation (CVE-2026-34660, CVSS score of 9.3).CVE-2026-34660Vendor / Product unavailableIt addresses two critical-severity flaws that could be exploited for arbitrary code execution (CVE-2026-34659, CVSS score of 9.6) and privilege escalation (CVE-2026-34660, CVSS score of 9.3).

Vendors

AdobeAdobe on Tuesday announced the release of patches for 52 vulnerabilities across 10 products, including critical-severity bugs that could lead to code execution and privilege escalation.

Products

Adobe CommerceThis month’s update for Adobe Commerce resolves the largest number of security defects across the board.Adobe ConnectWhen it comes to the severity of the resolved vulnerabilities, the Adobe Connect update takes the lead.After EffectsHigh-severity code execution issues were also resolved in After Effects (4 vulnerabilities), Premiere Pro (3 flaws), Media Encoder (2), Substance 3D Painter (2), and Substance 3D Sampler (1).Content Authenticity SDKContent Authenticity SDK comes in second, with patches for 14 flaws.IllustratorThe update for Illustrator resolves two high-severity code execution defects and two medium-severity issues leading to DoS and memory exposure.Media EncoderHigh-severity code execution issues were also resolved in After Effects (4 vulnerabilities), Premiere Pro (3 flaws), Media Encoder (2), Substance 3D Painter (2), and Substance 3D Sampler (1).Premiere ProHigh-severity code execution issues were also resolved in After Effects (4 vulnerabilities), Premiere Pro (3 flaws), Media Encoder (2), Substance 3D Painter (2), and Substance 3D Sampler (1).Substance 3D DesignerOf the five medium-severity weaknesses patched in Substance 3D Designer, four could lead to code execution and one to arbitrary file system read.Substance 3D PainterHigh-severity code execution issues were also resolved in After Effects (4 vulnerabilities), Premiere Pro (3 flaws), Media Encoder (2), Substance 3D Painter (2), and Substance 3D Sampler (1).Substance 3D SamplerHigh-severity code execution issues were also resolved in After Effects (4 vulnerabilities), Premiere Pro (3 flaws), Media Encoder (2), Substance 3D Painter (2), and Substance 3D Sampler (1).

Related Articles