Adobe Patches 80 Vulnerabilities Across Eight Products
Summary
Adobe released fixes for 80 vulnerabilities across eight products, including Commerce, Illustrator, Acrobat Reader and Premiere Pro. The company says none of the flaws are known to be exploited in the wild.
Key points
- Adobe fixed 19 vulnerabilities in Commerce and Magento Open Source and urged users to apply patches within 30 days.
- Five high-severity Commerce flaws could enable privilege escalation; another could bypass security features.
- Illustrator received fixes for seven vulnerabilities, including five that could lead to arbitrary code execution.
- High-severity arbitrary-code-execution flaws were also fixed in Acrobat Reader, Premiere Pro, Substance 3D Stager and DNG SDK.
- Adobe did not say that any of the vulnerabilities are being exploited in the wild.
Article Details
- Event Type
- Adobe released security updates addressing 80 vulnerabilities across eight products.
- Impact
- The vulnerabilities include issues that could allow arbitrary code execution, privilege escalation, security feature bypass, and denial of service. Adobe urged users of Adobe Commerce and Magento Open Source to apply patches within 30 days because those products are known targets for threat actors. Adobe did not report that any of the defects were being exploited in the wild.
CVE
CVE-2026-21284Adobe · Adobe Commerce; Adobe · Adobe Commerce B2B; +1 moreThe update resolves six high-severity bugs, five of which could lead to privilege escalation: CVE-2026-21290, CVE-2026-21361, CVE-2026-21284, CVE-2026-21311, and CVE-2026-21309.CVE-2026-21289Adobe · Adobe Commerce; Adobe · Adobe Commerce B2B; +1 moreThe sixth, tracked as CVE-2026-21289, leads to security feature bypass.CVE-2026-21290Adobe · Adobe Commerce; Adobe · Adobe Commerce B2B; +1 moreThe update resolves six high-severity bugs, five of which could lead to privilege escalation: CVE-2026-21290, CVE-2026-21361, CVE-2026-21284, CVE-2026-21311, and CVE-2026-21309.CVE-2026-21309Adobe · Adobe Commerce; Adobe · Adobe Commerce B2B; +1 moreThe update resolves six high-severity bugs, five of which could lead to privilege escalation: CVE-2026-21290, CVE-2026-21361, CVE-2026-21284, CVE-2026-21311, and CVE-2026-21309.CVE-2026-21311Adobe · Adobe Commerce; Adobe · Adobe Commerce B2B; +1 moreThe update resolves six high-severity bugs, five of which could lead to privilege escalation: CVE-2026-21290, CVE-2026-21361, CVE-2026-21284, CVE-2026-21311, and CVE-2026-21309.CVE-2026-21333Adobe · Illustrator Desktop 2025; Adobe · Illustrator Desktop 2026Adobe Illustrator received patches for seven vulnerabilities, including five bugs that could lead to arbitrary code execution: CVE-2026-21333, CVE-2026-21362, CVE-2026-27271, CVE-2026-27272, and CVE-2026-27267.CVE-2026-21361Adobe · Adobe Commerce; Adobe · Adobe Commerce B2B; +1 moreThe update resolves six high-severity bugs, five of which could lead to privilege escalation: CVE-2026-21290, CVE-2026-21361, CVE-2026-21284, CVE-2026-21311, and CVE-2026-21309.CVE-2026-21362Adobe · Illustrator Desktop 2025; Adobe · Illustrator Desktop 2026Adobe Illustrator received patches for seven vulnerabilities, including five bugs that could lead to arbitrary code execution: CVE-2026-21333, CVE-2026-21362, CVE-2026-27271, CVE-2026-27272, and CVE-2026-27267.CVE-2026-27267Adobe · Illustrator Desktop 2025; Adobe · Illustrator Desktop 2026Adobe Illustrator received patches for seven vulnerabilities, including five bugs that could lead to arbitrary code execution: CVE-2026-21333, CVE-2026-21362, CVE-2026-27271, CVE-2026-27272, and CVE-2026-27267.CVE-2026-27271Adobe · Illustrator Desktop 2025; Adobe · Illustrator Desktop 2026Adobe Illustrator received patches for seven vulnerabilities, including five bugs that could lead to arbitrary code execution: CVE-2026-21333, CVE-2026-21362, CVE-2026-27271, CVE-2026-27272, and CVE-2026-27267.CVE-2026-27272Adobe · Illustrator Desktop 2025; Adobe · Illustrator Desktop 2026Adobe Illustrator received patches for seven vulnerabilities, including five bugs that could lead to arbitrary code execution: CVE-2026-21333, CVE-2026-21362, CVE-2026-27271, CVE-2026-27272, and CVE-2026-27267.
Vendors
Products
Adobe Acrobat ReaderAdobe on Tuesday announced patches for 80 vulnerabilities across 8 products, including Commerce, Illustrator, Acrobat Reader, and Premiere Pro.Adobe CommerceThe company rolled out fixes for 19 flaws in Adobe Commerce and Magento Open Source, urging users to apply the patches within the next 30 days, based on these products being a known target for threat actors.Adobe Commerce B2BFixes for these bugs were released for Adobe Commerce versions 2.4.4 to 2.4.9, Adobe Commerce B2B versions 1.3.3 to 1.5.3, and Magento Open Source versions 2.4.5 to 2.4.9.DNG Software Development Kit (SDK)High-severity security defects leading to arbitrary code execution were also resolved in Acrobat Reader, Premiere Pro, Substance 3D Stager, and DNG Software Development Kit (SDK).Experience ManagerAdobe’s fresh round of security updates also resolves medium- and low-severity vulnerabilities in these products, as well as in Substance 3D Painter and Experience Manager.IllustratorAdobe on Tuesday announced patches for 80 vulnerabilities across 8 products, including Commerce, Illustrator, Acrobat Reader, and Premiere Pro.MagentoThe company rolled out fixes for 19 flaws in Adobe Commerce and Magento Open Source, urging users to apply the patches within the next 30 days, based on these products being a known target for threat actors.Premiere ProAdobe on Tuesday announced patches for 80 vulnerabilities across 8 products, including Commerce, Illustrator, Acrobat Reader, and Premiere Pro.Substance 3D PainterAdobe’s fresh round of security updates also resolves medium- and low-severity vulnerabilities in these products, as well as in Substance 3D Painter and Experience Manager.Substance 3D StagerHigh-severity security defects leading to arbitrary code execution were also resolved in Acrobat Reader, Premiere Pro, Substance 3D Stager, and DNG Software Development Kit (SDK).