Adobe Security Updates — February 2024
Tuesday, 13 February 2024
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 3
-
Critical 9.8
CVE-2024-20738 Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability | CVE-2023-44324 bypassEPSS 1.1%
-
Critical 9.1
CVE-2024-20719 [Adobe Commerce] Stored XSS from low privileged admin user on every admin page, bypassing CVE-2023-29297EPSS 1.3%
-
Critical 9.1
CVE-2024-20720 Command injection in data collector backup due to insufficient patching of CVE-2023-38208EPSS 3.7%
All vulnerabilities 30
Critical3 ShowHide
-
Critical 9.8
CVE-2024-20738 Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability | CVE-2023-44324 bypassEPSS 1.1%
-
Critical 9.1
CVE-2024-20719 [Adobe Commerce] Stored XSS from low privileged admin user on every admin page, bypassing CVE-2023-29297EPSS 1.3%
-
Critical 9.1
CVE-2024-20720 Command injection in data collector backup due to insufficient patching of CVE-2023-38208EPSS 3.7%
High14 ShowHide
- High 7.8
- High 7.8 EPSS 2.4%
- High 7.8 EPSS 2%
-
High 7.8
CVE-2024-20728 ZDI-CAN-22727: Adobe Acrobat Pro DC Annotation Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.8%
-
High 7.8
CVE-2024-20729 TALOS-2023-1890 - Adobe Acrobat Reader Annot3D object zoom event use-after-free vulnerabilityEPSS 3.4%
- High 7.8 EPSS 4.4%
-
High 7.8
CVE-2024-20731 TALOS-2023-1901 - Adobe Acrobat Reader FileAttachment PDAnnot destroy use-after-free vulnerabilityEPSS 2.6%
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
Medium13 ShowHide
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5 EPSS 3.4%
-
Medium 5.5
CVE-2024-20734 ZDI-CAN-22516: Adobe Acrobat Pro DC AcroForm Use-After-Free Information Disclosure VulnerabilityEPSS 3.3%
-
Medium 5.5
CVE-2024-20735 TALOS-2023-1905 - Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerabilityEPSS 2.3%
-
Medium 5.5
CVE-2024-20736 ZDI-CAN-22822: Adobe Acrobat Pro DC AcroForm Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 3.2%
-
Medium 5.5
CVE-2024-20747 TALOS-2023-1908 - Adobe Acrobat Reader Font CharStrings INDEX out-of-bounds read vulnerabilityEPSS 2.4%
-
Medium 5.5
CVE-2024-20748 TALOS-2023-1909 - Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read vulnerabilityEPSS 2.3%
-
Medium 5.5
CVE-2024-20749 TALOS-2023-1910 - Adobe Acrobat Reader Font CharStrings CharStringsOffset out-of-bounds read vulnerabilityEPSS 2.3%
- Medium 5.4
- Medium 4.9
- Medium 4.3