Patch days / January 2021

Adobe Security Updates — January 2021

Tuesday, 12 January 2021

Vulnerabilities: 8
Critical: 0
High: 7
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

All vulnerabilities 8

High7 Show

High 8.6
CVE-2021-21006 Heap buffer overflow when handling crafted font file could lead to arbitrary code execution
EPSS 5.9%
High 8.6
CVE-2021-21009 Server-side request forgery (SSRF) in Campaign Classic could lead to sensitive information disclosure
EPSS 3.1%
High 8.1
CVE-2021-21013 Magento Commerce Insecure Direct Object Reference Could Lead To Information Disclosure
EPSS 3%
High 7.0
CVE-2021-21007 Uncontrolled search path element vulnerability in Illustrator 25.0 could lead to arbitrary code execution
EPSS 2.2%
High 7.0
CVE-2021-21008 Uncontrolled Search Path Element vulnerability in Animate 21.0
EPSS 2.5%
High 7.0
CVE-2021-21010 Uncontrolled search path element in Adobe InCopy
EPSS 2.6%
High 7.0
CVE-2021-21011 Uncontrolled Search Path Element in Adobe Captivate 2019
EPSS 2.1%

Medium1 Show

Medium 5.3
CVE-2021-21012 Magento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure
EPSS 3.9%