Adobe Fixes Reader Zero-day Vulnerability Exploited In The Wild

Adobe has released a massive Patch Tuesday security update release that fixes vulnerabilities in twelve different applications, including one actively exploited vulnerability Adobe Reader.

The updated applications include Adobe Experience Manager, Adobe InDesign, Adobe Illustrator, Adobe InCopy, Adobe Genuine Service, Adobe Acrobat and Reader, Magento, Adobe Creative Cloud Desktop Application, Adobe Media Encoder, dobe After Effects, Adobe Medium, and Adobe Animate.

Of particular concern, Adobe warns that one of the Adobe Acrobat and Reader vulnerabilities tracked as CVE-2021-28550 has been exploited in the wild in limited attacks against Adobe Reader on Windows devices.

CVE-2021-28550 is a remote code execution vulnerability that could allow attackers to execute almost any command in Windows, including installing malware and the possibility of taking over the computer.

Also Read: Practitioner Certificate In Personal Data Protection: Everything You Need To Know

The complete list of Adobe Products that received security updates are listed below:

In total, there were 43 vulnerabilities fixed, not including dependencies in Adobe Experience Manager.

Out of all the Adobe security updates released today, Adobe Acrobat & Reader had the most fixes, with 14 vulnerabilities.

Install updates immediately

Adobe advises customers using vulnerable products to update to the latest versions as soon as possible to fix bugs that could lead to successful exploitation of unpatched installations.

This guidance is critical today, considering that the Adobe Acrobat & Reader CVE-2021-28550 vulnerability is known to be used in active attacks.

Also Read: The DNC Singapore: Looking At 2 Sides Better

In most cases, users can update their software by using the auto-update feature of the product using the following steps:

  • By going to Help > Check for Updates.
  • The full update installers can be downloaded from Adobe’s Download Center.
  • Let the products update automatically, without requiring user intervention, when updates are detected.

If the new update is not available via autoupdate, you can check the security bulletins linked to above for the latest download links.

Privacy Ninja provides GUARANTEED quality and results for the following services: 
DPO-As-A-Service (Outsourced DPO Subscription)
PDPA Compliance Training
P
DPA Compliance Audit
Dig
ital Transformation Consultancy
Data Protection Trustmarks Certification Readiness Consultancy

PDPA Data Protection Software
Vulnerability Assessment & Penetration Testing (VAPT)
Smart Contract Audit

Like & Subscribe:
Facebook
LinkedIn
Twitter
YouTube
Podcast


0 Comments

Leave a Reply

Your email address will not be published. Required fields are marked *