Adobe Issues Security Fixes for Vulnerabilities Across Several Products

Adobe has released a series of important security updates this week, addressing multiple vulnerabilities that could expose systems to serious risks, including arbitrary code execution, application crashes, and memory leaks. Some of these flaws are particularly severe, and their CVE scores above 9 highlight just how critical it is to update as soon as possible. While no active exploits have been reported for these vulnerabilities, their severity makes it crucial to patch them as soon as possible.

Three of these vulnerabilities stand out due to their severity and should be prioritized for patching. These affect Adobe Connect, ColdFusion, and Adobe Experience Manager Forms, all of which could allow attackers to run arbitrary code on your system, giving them potential access to execute malicious actions remotely.

Adobe Connect (CVE-2025-27203, CVSS 9.3) contains a critical vulnerability that could allow attackers to execute arbitrary code on affected systems. This flaw can be exploited to gain remote access and take control of a machine, posing a serious security risk. Similarly, ColdFusion (CVE-2025-49535, CVSS 9.3) has multiple vulnerabilities across versions 2025, 2023, and 2021, including issues that could lead to arbitrary file system reads, privilege escalation, and denial-of-service attacks. These could allow attackers to escalate privileges or crash the system. And critical flaws were patched in Adobe Experience Manager Forms (CVE-2025-49533, CVSS 9.8) which could lead to arbitrary code execution, making it another high-risk vulnerability to address immediately.

In addition to these critical vulnerabilities, Adobe has also released updates for several other products:

• Adobe After Effects (Windows & macOS) – A security patch resolves vulnerabilities that could lead to denial-of-service (DoS) or cause a memory leak, which could disrupt system performance or cause crashes.
• Adobe Illustrator – A patch for Illustrator resolves vulnerabilities that could result in application denial-of-service, arbitrary code execution, and memory leaks.
• Adobe Substance 3D Viewer – This update addresses critical vulnerabilities, including the risk of arbitrary code execution, which could allow an attacker to run malicious code remotely. It also fixes a memory leak issue.
• Adobe Audition (Windows & macOS) – A patch for this audio editing software addresses a vulnerability that could lead to a denial-of-service attack.
• Adobe InCopy – A critical update for InCopy fixes vulnerabilities that could result in arbitrary code execution.
• Adobe InDesign – This update addresses vulnerabilities that could allow for arbitrary code execution.
• Adobe Dimension – Critical and important vulnerabilities that could lead to arbitrary code execution and memory leaks have been patched.
• Adobe Substance 3D Stager – This update addresses an important vulnerability that could lead to memory leaks.
• Adobe FrameMaker – This update fixes critical and important vulnerabilities, including the risk of arbitrary code execution, memory leaks, and denial-of-service.

Always make sure to apply the latest updates to protect your systems from potential vulnerabilities.

For more detailed information on all of Adobe’s recent security patches and to ensure you’re fully up to date, check out Adobe’s official security bulletins here.