Adobe fixes 165 flaws across Acrobat, Experience Manager, Connect, and creative apps

Adobe released security updates for a broad set of products including Acrobat and Reader, Experience Manager, Media Encoder, Illustrator, After Effects, Animate, InDesign, PDFL SDK, Connect, Photoshop, Premiere Pro, Bridge, FrameMaker, and multiple Substance 3D applications. The advisories cover 165 vulnerabilities, including 45 rated critical, with impacts spanning remote code execution, privilege escalation, unauthorized access to sensitive data, security feature bypass, and denial of service.

Many of the most severe issues can be triggered by opening specially crafted files, creating a significant risk for desktop creative tools such as Acrobat, Illustrator, After Effects, and Media Encoder, while some Adobe Connect flaws can be exploited remotely without authentication and include reflected XSS and privilege-escalation issues. Adobe published product-specific bulletins for affected offerings such as APSB24-92 for Acrobat, APSB24-69 for Experience Manager, APSB24-93 for Media Encoder, APSB24-94 for Illustrator, and APSB24-95 for After Effects, and urged customers to upgrade to the patched versions immediately.