Adobe fixes Reader zero-day vulnerability exploited in the wild

[Gandalf_The_Grey]

Adobe has released a massive Patch Tuesday security update release that fixes vulnerabilities in twelve different applications, including one actively exploited vulnerability Adobe Reader.

The updated applications include Adobe Experience Manager, Adobe InDesign, Adobe Illustrator, Adobe InCopy, Adobe Genuine Service, Adobe Acrobat and Reader, Magento, Adobe Creative Cloud Desktop Application, Adobe Media Encoder, dobe After Effects, Adobe Medium, and Adobe Animate.

Of particular concern, Adobe warns that one of the Adobe Acrobat and Reader vulnerabilities tracked as CVE-2021-28550 has been exploited in the wild in limited attacks against Adobe Reader on Windows devices.

CVE-2021-28550 is a remote code execution vulnerability that could allow attackers to execute almost any command in Windows, including installing malware and the possibility of taking over the computer.

Adobe advises customers using vulnerable products to update to the latest versions as soon as possible to fix bugs that could lead to successful exploitation of unpatched installations.

This guidance is critical today, considering that the Adobe Acrobat & Reader CVE-2021-28550 vulnerability is known to be used in active attacks.

Adobe fixes Reader zero-day vulnerability exploited in the wild

Adobe has released a massive Patch Tuesday security update release that fixes vulnerabilities in twelve different applications, including one actively exploited vulnerability Adobe Reader.

www.bleepingcomputer.com

Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader

A patch for Adobe Acrobat, the world’s leading PDF reader, fixes a vulnerability under active attack affecting both Windows and macOS systems that could lead to arbitrary code execution.

threatpost.com