Adobe is patching eighty-two vulnerabilities in various products with the release of new security updates . Of these vulnerabilities, 45 have been rated as critical for security, while the rest are of important or moderate importance.
Among the products included in the updates are Adobe Acrobat and Reader, Adobe Experience Manager & Forms, and Adobe Download Manager.
Adobe Acrobat and Reader
Security updates for Windows and macOS address critical and important vulnerabilities in Adobe Acrobat and Reader. The vulnerabilities discovered in them could allow an attacker to execute arbitrary code .
Affected versions
Acrobat DC 2019.012.20040 and earlier versions
Acrobat Reader DC 2019.012.20040 and earlier versions
Acrobat 2017 2017.011.30148
Acrobat Reader 2017 2017.011.30148 and earlier versions
Acrobat 2015 2015.006.30503 and earlier versions
Acrobat Reader 2015 2015.006.30503 and earlier versions
Version updates
Acrobat DC 2019.021.20047
Acrobat Reader DC 2019.021.20047
Acrobat DC 2017.011.30150
Acrobat Reader DC 2017.011.30150
Acrobat DC 2015.006.30504
Acrobat Reader DC 2015.006.30504
Adobe Experience Manager
Security updates released for Adobe Experience Manager (AEM) resolve multiple vulnerabilities in AEM versions 6.3, 6.4, and 6.5.
Successful exploitation of these vulnerabilities allows an attacker to gain unauthorized access to the AEM environment.
Adobe Experience Manager Forms
With Adobe Experience Manager Forms, Adobe is fixing a cross-site issue. The vulnerability could lead to the disclosure of sensitive information.
Adobe recommends that users update installations to the latest versions of Adobe Experience Manager Forms 6.3, 6.4, and 6.5.
Adobe Download Manager
The security update resolves a Privilege Escalation vulnerability in Adobe Download Manager for Windows. This vulnerability is rated important.
Affected version
Adobe Download Manager 2.0.0.363
Updated version
Adobe Download Manager 2.0.0.417
Adobe recommends that users of its products download the updated versions to stay safe.
