Adobe has released updates security to address vulnerabilities identified in Adobe Connect and Adobe Reader for Android.
The company released the security for November 2020 and fixed a total of three vulnerabilities (a very small number compared to previous patches).
Adobe advises all customers to update vulnerable products and install the latest versions as soon as possible. This will help prevent attacks that could exploit these vulnerabilities.
Security update for Adobe Reader for Android
Adobe has released a security update to fix an information disclosure vulnerability found in Adobe Reader for Android.
“This update addresses a critical vulnerability. Successful exploitation could lead to information disclosure,” Adobe’s bulletin explains.
| Vulnerability Category | Vulnerability Impact | Severity | CVE Number |
| Improper access control | Sensitive information disclosure | Important | CVE-2020-24441 |
The company advises users to install Adobe Reader Mobile 20.9.0 to fix this vulnerability.
Security update for Adobe Connect
Adobe has also included a patch for Adobe Connect, which fixes two cross-site scripting vulnerabilities. These vulnerabilities could allow a user's browser to execute malicious JavaScript.
According to the company, both vulnerabilities are serious.
All users are urged to install Adobe Connect 11.0.5 to address the two security issues.
| Vulnerability Category | Vulnerability Impact | Severity | CVE Number |
| Reflected cross-site scripting | Arbitrary JavaScript execution in the browser | Important | CVE-2020-24442CVE-2020-24443 |
Source: Bleeping Computer
