In an update on Tuesday, Adobe announced that it has rolled out updates to its Bridge, Photoshop , and Preludeto fix several vulnerabilities that could allow arbitrary code.
The Windows and macOS versions of Bridge contained three critical out-of-bounds read and write vulnerabilities, which could be exploited by a malicious user to execute arbitrary code.
In Photoshop CC for Windows and macOS, the company identified five critical flaws, including two out-of-bounds read errors and three out-of-bounds write issues, which could also be exploited to execute arbitrary code.
On the other hand, in the video logging software Prelude, Adobe fixed two out-of-bounds read vulnerabilities and two out-of-bounds write vulnerabilities.
All of the above vulnerabilities have been rated as critical and can be exploited by malicious actors to execute arbitrary code.
The security vulnerabilities that Adobe patched in Bridge, Photoshop, and Prelude were discovered and reported to the company by Mat Powell , a researcher with Trend Micro 's Zero Day Initiative (ZDI) team . In fact, Adobe recently credited Powell for reporting memory corruption bugs in Character Animation, Premiere Rush, Premiere Pro, and Audition.
The company has also published a report to inform its customers about the patching of a critical vulnerability in its Reader Mobile. Exploitation of this vulnerability could lead to information.
The company stated that it has not discovered any exploitation of the above vulnerabilities and considering that they are not high on the list of most frequently exploited vulnerabilities, it does not consider it very likely.
Earlier this month, Adobe announced the patching of over a dozen vulnerabilities in its Creative Cloud products, Media Encoder, Genuine Service, ColdFusion, and Download Manager.
