TeamHood 
Adobe has released Patch Tuesday security update release that fixes vulnerabilities in twelve different applications, including one actively exploited vulnerability Adobe Reader.
CVE-2021-28550 which can be found in both Adobe Acrobat and Reader has been exploited in the wild against Adobe reader on windows devices.
CVE-2021-28550 is a remote code execution vulnerability that could allow attackers to execute almost any command in Windows. Attackers can install malicious software or take over the computer after exploiting these vulnerabilites.
The complete list of Adobe Products that received security updates are as follows:
- Adobe InCopy | APSB21-25: 1 Critical code execution vulnerability fixed.
- Adobe Acrobat | APSB21-29: 10 Critical and 4 Important vulnerabilities fixed.
- Adobe InDesign | APSB21-22: 3 Critical code execution vulnerabilities fixed.
- Adobe Illustrator | APSB21-24: 5 Critical code execution vulnerabilities fixed.
- Adobe Experience Manager | APSB21-15: 1 x Critical code execution in browser and 1 Important DoS vulnerabilities were fixed. There were also numerous updates to dependencies that have known vulnerabilities.
- Adobe After Effects | APSB21-33: This bulletin is not available yet.
- Adobe Medium | APSB21-34: 1 Critical code execution vulnerability fixed.
- Adobe Animate | APSB21-35: 2 Critical code execution bugs and 5 important vulnerabilities fixed.
- Adobe Genuine Service | APSB21-27: 1 Important vulnerability fixed.
- Magento | APSB21-30: 1 Important and 6 Moderate vulnerabilities fixed.
- Adobe Creative Cloud Desktop Application | APSB21-31: 1 Critical privilege escalation bug fixed.
- Adobe Media Encoder | APSB21-32: 1 Important vulnerability fixed.
Out of all the Adobe security updates released today, Adobe Acrobat & Reader had the most fixes, with 14 vulnerabilities.
Important Guidelines from Adobe
Adobe advises customers using vulnerable products to update to the latest versions as soon as possible to fix bugs that could lead to successful exploitation of unpatched installations.
This guidance is critical today, considering that the Adobe Acrobat & Reader CVE-2021-28550 vulnerability is known to be used in active attacks.
Following Steps can be taken to mitigate the vulnerabilities
- By going to Help > Check for Updates.
- The full update installers can be downloaded from Adobe’s Download Center.
- Let the products update automatically, without requiring user intervention, when updates are detected.
Updates can also be downloaded from the link highlighted above.
