Adobe Security Updates – 11 September 2024

Adobe has released security updates to fix several vulnerabilities across Adobe Acrobat Reader, ColdFusion, and Audition.

The addressed vulnerabilities could allow the attacker to trigger denial of service attacks or execute arbitrary code and gain access to the affected products.

Sample of the addressed vulnerabilities:

1. Adobe ColdFusion Code Execution Vulnerability (CVE-2024-41874):

• CVSS: 9.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

2. Adobe Acrobat Reader Code Execution Vulnerability (CVE-2024-45112):

• CVSS: 8.6
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access