Loading story…
Adobe published security bulletins for Adobe Bridge (APSB26-39) and Adobe Illustrator (APSB26-42), disclosing product-specific security updates for the two creative applications. The advisories were released through Adobe's product security bulletin channel and indicate that both products received fixes intended to address security issues.
The notices provide separate tracking identifiers for each application, signaling distinct remediation guidance for Bridge and Illustrator users and administrators. Organizations using either product should review the relevant Adobe bulletin, identify affected versions, and prioritize deployment of the vendor-provided updates across managed endpoints.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
Adobe released security bulletin APSB26-42 for Adobe Illustrator. No additional incident or exploitation details are provided in the reference.
Adobe released security bulletin APSB26-41 for DNG SDK. No additional incident or exploitation details are provided in the reference.
Adobe released security bulletin APSB26-39 for Adobe Bridge. No additional incident or exploitation details are provided in the reference.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Adobe published security bulletins for **Acrobat** and **Photoshop**, identifying vulnerabilities in two widely deployed creative and document-processing products. The advisories, tracked as `APSB26-43` for Acrobat and `APSB26-40` for Photoshop, were released through Adobe's product security bulletin channel and signal that security updates are available for affected software. The coordinated disclosures indicate ongoing remediation across Adobe's desktop application portfolio, with organizations using Acrobat for PDF workflows and Photoshop for image editing advised to review the relevant bulletins and apply vendor-provided patches. Because both products are common in enterprise environments, defenders should prioritize update validation and deployment to reduce exposure from unpatched client-side software.
Jul 1, 2026
Adobe released security updates for a broad set of products including **Acrobat and Reader**, **Experience Manager**, **Media Encoder**, **Illustrator**, **After Effects**, **Animate**, **InDesign**, **PDFL SDK**, **Connect**, **Photoshop**, **Premiere Pro**, **Bridge**, **FrameMaker**, and multiple **Substance 3D** applications. The advisories cover **165 vulnerabilities**, including **45 rated critical**, with impacts spanning **remote code execution**, **privilege escalation**, **unauthorized access to sensitive data**, **security feature bypass**, and **denial of service**. Many of the most severe issues can be triggered by opening specially crafted files, creating a significant risk for desktop creative tools such as Acrobat, Illustrator, After Effects, and Media Encoder, while some **Adobe Connect** flaws can be exploited remotely without authentication and include reflected **XSS** and privilege-escalation issues. Adobe published product-specific bulletins for affected offerings such as `APSB24-92` for Acrobat, `APSB24-69` for Experience Manager, `APSB24-93` for Media Encoder, `APSB24-94` for Illustrator, and `APSB24-95` for After Effects, and urged customers to upgrade to the patched versions immediately.
Jul 24, 2026
Adobe published its March 2026 security advisories covering **multiple vulnerabilities** across a broad set of products, with impacts including **remote code execution (RCE)**, **elevation of privilege**, **cross-site scripting (XSS)**, **information disclosure**, **denial of service**, and **security restriction bypass**. Products called out include **Adobe Commerce** (including *Adobe Commerce B2B* and *Magento Open Source*), **Illustrator**, **Acrobat/Reader**, **Premiere Pro**, **Experience Manager (AEM)**, **Substance 3D Painter**, **Substance 3D Stager**, and the **Adobe DNG SDK**. The Hong Kong CERT bulletin characterized the overall risk level of the March release as **Medium**, listing eight medium-risk product advisories (e.g., `APSB26-05`, `APSB26-18`, `APSB26-24`, `APSB26-26`). Canada’s Cyber Centre alert (**AV26-215**) echoed the same advisory set and provided affected version ranges (e.g., *Illustrator 2025* prior to 29.8.4/30.1, *Acrobat/Reader DC* prior to 25.001.21265, *Premiere Pro* prior to 25.5, *AEM* Cloud Service and 6.5 LTS/6.5 SP23 and prior, and *DNG SDK* prior to 1.7.1 build 2471), urging organizations to review Adobe’s advisories and apply the required updates.
Jun 29, 2026