Adobe Security Updates – 14 February 2024

The addressed vulnerabilities could allow the attacker to bypass security restrictions, obtain sensitive information, trigger denial of services attacks, execute arbitrary code, and gain access to the affected products.

Sample of the addressed vulnerabilities:

1. Adobe Commerce Code Execution Vulnerability (CVE-2024-20719):

• CVSS: 9.1
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Gain Access

2. Adobe Acrobat Reader Code Execution Vulnerability (CVE-2024-20726):

• CVSS: 7.8
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access

Affected Products:

• Adobe Commerce.
• Adobe Acrobat and Reader.
• Adobe FrameMaker Publishing Server.