Adobe has released a patch to fix three vulnerabilities found in Media Encoder.
Adobe Media Encoder, software used to encode audio and video into different formats, is the only subject of the security update issued outside of the company's usual monthly update rollout.
On Tuesday, Adobe said that three vulnerabilities – CVE-2020-9739, CVE-2020-9744 and CVE-2020-9745 – are weaknesses “that could lead to the disclosure of users’ personal information.”
The bugs were reported to Adobe by cybersecurity researcher Radu Motspan and are considered “critical.” They affect version 14.4 of Adobe Media Encoder on Windows and Mac.
However, each vulnerability has been given a priority rating of 3, which means that Adobe does not consider them particularly serious.
"This update resolves vulnerabilities in a product that has not historically been targeted by attackers. Adobe recommends that administrators install the update at their own discretion," the company said.
As always, users are advised to accept automatic software updates to patch their builds and stay protected.
Last week, the giant company released its September security patch, addressing vulnerabilities in Adobe Experience Manager, InDesign, and Framemaker.
Critical and important vulnerabilities in the products were resolved, including cross-site scripting (XSS) issues, memory corruption bugs, and security issues leading to arbitrary code execution.
Also on Tuesday, Adobe reported third-quarter financial results that beat expectations. Adobe said its revenue came in at $955 million, which is a truly impressive amount.
