cyber.hendryadrian.com
Security News · securityweek.com

Adobe and Nvidia Patch Dozens of Vulnerabilities, Including Critical Flaws

· Original article ↗

Summary

Adobe and Nvidia issued updates addressing dozens of vulnerabilities. The flaws affect products including Nvidia’s AI infrastructure and Adobe’s creative software; Adobe said none had been exploited in the wild.

Key points

  • Nvidia disclosed 18 vulnerabilities in NeMoClaw and OpenShell; two are critical, and a dozen others are rated high severity.
  • Cyera detailed one of the Nvidia flaws, demonstrating how it could be used to hijack AI agents.
  • Nvidia patched five vulnerabilities in DGX Spark and five in Unified Fabric Manager, including flaws that could enable code execution or privilege escalation.
  • Nvidia also issued mitigation advice for attacks against its GPUs and recently patched vulnerabilities in Triton Inference Server, Cumulus Linux, and NVOS.
  • Adobe issued seven advisories covering dozens of flaws, including critical code-execution vulnerabilities in Substance 3D products, XD, and Campaign Classic.
  • Adobe patched denial-of-service and information-exposure flaws in Illustrator and Content Credentials SDK; it said none of the vulnerabilities had been exploited in the wild.

Article Details

Event Type
Adobe and Nvidia security advisories and vulnerability patches
Impact
Adobe and Nvidia patched dozens of vulnerabilities, including critical flaws. Nvidia reported that two critical vulnerabilities affecting NemoClaw and OpenShell could enable code execution, privilege escalation, data tampering, information disclosure, and denial of service. Adobe patched critical code-execution flaws in several products and DoS and information-exposure flaws in others. Adobe said none of its vulnerabilities had been exploited in the wild; only the Campaign Classic advisory received a priority rating of 1.

Vendors

AdobeAdobe and Nvidia on Tuesday announced patches for dozens of vulnerabilities affecting their products, including flaws rated critical severity.NvidiaAdobe and Nvidia on Tuesday announced patches for dozens of vulnerabilities affecting their products, including flaws rated critical severity.

Products

Campaign ClassicThe company has patched critical code execution vulnerabilities in Substance 3D Designer, Substance 3D Sampler, Substance 3D Painter, XD, and Campaign Classic.Content Credentials SDKDoS and information exposure flaws have been fixed in Illustrator and Content Credentials SDK.Cumulus LinuxThe company informed customers the same day about privilege escalation and code execution vulnerabilities patched in Cumulus Linux and NVOS.DGX SparkFive vulnerabilities have been resolved by Nvidia in its DGX Spark AI computer, including three high-severity flaws that can be exploited for code execution, privilege escalation, data tampering, and DoS.IllustratorDoS and information exposure flaws have been fixed in Illustrator and Content Credentials SDK.NemoClawOne advisory alerts customers to 18 security vulnerabilities in NemoClaw and OpenShell, enterprise AI security and runtime infrastructure products designed to wrap around autonomous AI agents.NVOSThe company informed customers the same day about privilege escalation and code execution vulnerabilities patched in Cumulus Linux and NVOS.OpenShellOne advisory alerts customers to 18 security vulnerabilities in NemoClaw and OpenShell, enterprise AI security and runtime infrastructure products designed to wrap around autonomous AI agents.Substance 3D DesignerThe company has patched critical code execution vulnerabilities in Substance 3D Designer, Substance 3D Sampler, Substance 3D Painter, XD, and Campaign Classic.Substance 3D PainterThe company has patched critical code execution vulnerabilities in Substance 3D Designer, Substance 3D Sampler, Substance 3D Painter, XD, and Campaign Classic.Substance 3D SamplerThe company has patched critical code execution vulnerabilities in Substance 3D Designer, Substance 3D Sampler, Substance 3D Painter, XD, and Campaign Classic.Triton Inference ServerIn addition to the advisories published this week, Nvidia informed customers last week about five vulnerabilities in Triton Inference Server, including flaws that can allow arbitrary code execution.Unified Fabric ManagerIn the Unified Fabric Manager platform, the tech giant fixed two high- and three medium-severity issues that, if exploited, could lead to code execution and privilege escalation. XDThe company has patched critical code execution vulnerabilities in Substance 3D Designer, Substance 3D Sampler, Substance 3D Painter, XD, and Campaign Classic.

Related Articles