Skip to main content
Creating a new NHS England: NHS England and NHS Digital merged on 1 February 2023. More about the merger.

Adobe Releases Security Updates

Adobe security updates address vulnerabilities in ColdFusion, Photoshop, and other Adobe products

Report a cyber attack: call 0300 303 5222 or email carecert@nhsdigital.nhs.uk

Summary

Adobe security updates address vulnerabilities in ColdFusion, Photoshop, and other Adobe products


Threat details

Introduction

Adobe has released security updates to address multiple vulnerabilities in Adobe ColdFusion, Commerce, Experience Manager, Illustrator, Dimension, Creative Cloud, Substance 3D Stager, and Photoshop. An attacker could exploit some of these vulnerabilities to take control of an affected system.

Exploitation in the wild for CVE-2023-26360

Adobe has reported exploitation in the wild of an improper access control vulnerability, known as CVE-2023-26360, which affects ColdFusion. An unauthenticated, remote attacker could exploit this vulnerability, which could lead to arbitrary code execution.


Remediation advice

Organisations are encouraged to review the Adobe security pages for the following products and apply the following updates.


Remediation steps

Type Step
Patch

Security updates available for Adobe ColdFusion | APSB23-25


https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html
Patch

Security update available for Adobe Commerce | APSB23-17


https://helpx.adobe.com/security/products/magento/apsb23-17.html
Patch

Security updates available for Adobe Experience Manager | APSB23-18


https://helpx.adobe.com/security/products/experience-manager/apsb23-18.html
Patch

Security Updates Available for Adobe Illustrator | APSB23-19


https://helpx.adobe.com/security/products/illustrator/apsb23-19.html
Patch

Security updates available for Dimension | APSB23-20


https://helpx.adobe.com/security/products/dimension/apsb23-20.html
Patch

Security update available for Adobe Creative Cloud Desktop Application | APSB23-21


https://helpx.adobe.com/security/products/creative-cloud/apsb23-21.html
Patch

Security updates available for Substance 3D Stager | APSB23-22


https://helpx.adobe.com/security/products/substance3d_stager/apsb23-22.html
Patch

Security update available for Adobe Photoshop | APSB23-23


https://helpx.adobe.com/security/products/photoshop/apsb23-23.html

Last edited: 15 March 2023 2:11 pm