Adobe has released security updates to address multiple vulnerabilities in Adobe ColdFusion, Commerce, Experience Manager, Illustrator, Dimension, Creative Cloud, Substance 3D Stager, and Photoshop. An attacker could exploit some of these vulnerabilities to take control of an affected system.

Exploitation in the wild for CVE-2023-26360

Adobe has reported exploitation in the wild of an improper access control vulnerability, known as CVE-2023-26360, which affects ColdFusion. An unauthenticated, remote attacker could exploit this vulnerability, which could lead to arbitrary code execution.

Remediation advice

Organisations are encouraged to review the Adobe security pages for the following products and apply the following updates.

Remediation steps

Type	Step
Patch	Security updates available for Adobe ColdFusion \| APSB23-25 https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html
Patch	Security update available for Adobe Commerce \| APSB23-17 https://helpx.adobe.com/security/products/magento/apsb23-17.html
Patch	Security updates available for Adobe Experience Manager \| APSB23-18 https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html
Patch	Security Updates Available for Adobe Illustrator \| APSB23-19 https://helpx.adobe.com/security/products/illustrator/apsb23-19.html
Patch	Security updates available for Dimension \| APSB23-20 https://helpx.adobe.com/security/products/dimension/apsb23-20.html
Patch	Security update available for Adobe Creative Cloud Desktop Application \| APSB23-21 https://helpx.adobe.com/security/products/creative-cloud/apsb23-21.html
Patch	Security updates available for Substance 3D Stager \| APSB23-22 https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html
Patch	Security update available for Adobe Photoshop \| APSB23-23 https://helpx.adobe.com/security/products/photoshop/apsb23-23.html

CVE Vulnerabilities

Status Reserved

CVE-2023-26360

Last edited: 15 March 2023 2:11 pm