Adobe fixes 60 flaws across Creative Cloud, AEM, Connect, and ColdFusion
Patch & Detection Intelligence · 12 sources · Updated 4mo ago · First seen Jul 8, 2025
Adobe released security updates for multiple products, including After Effects, Audition, InCopy, InDesign, and Substance 3D Viewer, alongside fixes for Adobe Connect, Dimension, Substance 3D Stager, Illustrator, FrameMaker, AEM Forms, AEM Screens, and ColdFusion. The updates address 60 vulnerabilities, including 38 rated critical, with impacts ranging from remote code execution and privilege escalation to security feature bypass, unauthorized access, file disclosure, and denial of service.
Several of the most severe issues affect enterprise-facing platforms. Reported high-risk flaws include CVE-2025-27203 in Adobe Connect with a CVSS 9.3, CVE-2025-49533 in AEM Forms with a CVSS 9.8, and multiple ColdFusion vulnerabilities such as CVE-2025-49535 (CVSS 9.3) and CVE-2025-49551 (CVSS 8.8), some of which require no user interaction. Adobe urged customers to apply the patched versions immediately and to avoid opening messages or attachments from unknown or untrusted sources.
