Adobe Security Updates — January 2022
Tuesday, 11 January 2022
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 1
- Critical 9.8 EPSS 3.4%
All vulnerabilities 15
Critical1 ShowHide
- Critical 9.8 EPSS 3.4%
High10 ShowHide
- High 8.1 EPSS 1.6%
- High 8.1 EPSS 1.6%
- High 8.1 EPSS 1.6%
- High 8.0 EPSS 1.1%
- High 8.0 EPSS 1.6%
-
High 7.8
CVE-2021-45053 Adobe InCopy JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%
- High 7.8 EPSS 2.5%
-
High 7.8
CVE-2021-45056 Adobe InCopy JPEG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.4%
-
High 7.8
CVE-2021-45057 Adobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%
-
High 7.8
CVE-2021-45058 Adobe InDesign JPEG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%
Medium2 ShowHide
- Medium 6.5 EPSS 1.7%
- Medium 5.4 EPSS 1.5%
Low2 ShowHide
- Low 3.3 EPSS 2.1%
- Low 3.3 EPSS 1.5%