Patch days / July 2023

Adobe Security Updates — July 2023

Tuesday, 11 July 2023

Vulnerabilities: 20
Critical: 1
High: 4
Zero-days: 0
Public exploit: 0

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

Critical 9.8
CVE-2023-29300 Exploited Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
EPSS 100%
High 7.5
CVE-2023-29298 Exploited Adobe ColdFusion Improper Access Control Security feature bypass
EPSS 100%

All vulnerabilities 20

Critical1 Show

Critical 9.8
CVE-2023-29300 Exploited Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
EPSS 100%

High4 Show

High 7.5
CVE-2023-29298 Exploited Adobe ColdFusion Improper Access Control Security feature bypass
EPSS 100%
High 7.8
CVE-2021-43757 Adobe Media Encoder 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
High 7.8
CVE-2023-29308 [FG-VD-23-009] Adobe InDesign 2023 Arbitrary Code Execution Vulnerability Notification
High 7.5
CVE-2023-29301 Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass
EPSS 35%

Medium11 Show

Low4 Show