Adobe fixes Acrobat Reader zero-day with public PoC exploit

September 11, 2024 at 01:44PM A critical “use after free” vulnerability (CVE-2024-41869) in Adobe Acrobat Reader could lead to remote code execution through specially crafted PDF documents. Discovered in June, a security fix was initially ineffective, but a new release has addressed the issue. This discovery stems from cybersecurity researcher Haifei Li’s EXPMON platform, aiming … Read more

Adobe Patches Critical Flaws in Reader, Acrobat

May 14, 2024 at 01:54PM Adobe announced security patches for 35 vulnerabilities, including critical-severity issues in Acrobat, Reader, Illustrator, Substance 3D Painter, Aero, Animate, FrameMaker, and Dreamweaver. The vulnerabilities affect Windows and macOS users and could lead to code execution attacks. No active exploits were reported. Updates cover Adobe’s May security patches with detailed CVE … Read more

Patch Tuesday: Adobe Warns of Critical Flaws in Widely Deployed Software

February 13, 2024 at 01:03PM Adobe released patches for 30 security vulnerabilities in various products, including Adobe Acrobat, Reader, and Magento Open Source, among others. Users are at risk of code execution, security feature bypass, and denial-of-service attacks. The urgent patches address critical flaws and code execution bugs, with Adobe’s assurance of no known exploits … Read more