Adobe Dimension Update Fixes Code Execution, Denial-of-Service and Memory Exposure Flaws

Adobe released security bulletin APSB26-171 addressing high- and medium-severity vulnerabilities in Adobe Dimension 4.1.8 and earlier on Windows and macOS. The flaws could allow arbitrary code execution, application denial-of-service or memory exposure, with CVSS scores ranging from 5.5 to 8.6. Adobe said it was not aware of any exploitation in the wild involving the addressed issues.

Adobe recommends upgrading affected installations to Dimension 4.1.9 and assigns the update priority 3. Security teams should inventory deployed versions and schedule the upgrade. The related weakness category CWE-427, Uncontrolled Search Path Element, describes applications searching for resources in locations that attackers may control, potentially causing malicious resources to be loaded; the supplied bulletin synopsis does not identify which individual vulnerability carries that classification.