Patch days / December 2023

Adobe Security Updates — December 2023

Tuesday, 12 December 2023

Vulnerabilities: 27
Critical: 0
High: 13
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

All vulnerabilities 27

High13 Show

High 7.8
CVE-2023-47063 Adobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability IV.
High 7.8
CVE-2023-47074 ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
High 7.8
CVE-2023-47075 ZDI-CAN-22006: Adobe Illustrator JP2 File Parsing Use-After-Free Remote Code Execution Vulnerability
High 7.8
CVE-2023-48625 Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability VI
High 7.8
CVE-2023-48626 Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability V
High 7.8
CVE-2023-48627 Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability IV
High 7.8
CVE-2023-48628 Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability III
High 7.8
CVE-2023-48629 Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability II
High 7.8
CVE-2023-48630 Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability I
High 7.8
CVE-2023-48632 ZDI-CAN-22172: Adobe After Effects AEP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
High 7.8
CVE-2023-48633 ZDI-CAN-22173: Adobe After Effects AEP File Parsing Use-After-Free Remote Code Execution Vulnerability
High 7.8
CVE-2023-48634 ZDI-CAN-22175: Adobe After Effects AEP File Parsing Memory Corruption Remote Code Execution Vulnerability
High 7.8
CVE-2023-48639 Adobe Substance 3D Designer 13.0.2 build 6942 Vulnerability I

Medium14 Show