Adobe Security Updates — April 2024

Tuesday, 9 April 2024

Vulnerabilities: 27
Critical: 1
High: 7
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 1

Critical 9.0
CVE-2024-20758 Adobe Commerce | Improper Input Validation (CWE-20)
EPSS 1.4%

All vulnerabilities 27

Critical1 Show

Critical 9.0
CVE-2024-20758 Adobe Commerce | Improper Input Validation (CWE-20)
EPSS 1.4%

High7 Show

High 8.1
CVE-2024-20759 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
EPSS 1%
High 7.8
CVE-2024-20772 Adobe Media Encoder 2024 AI file parsing Stack based buffer overflow
High 7.8
CVE-2024-20795 Animate has an arbitrary code execution vulnerability when parsing svg files
High 7.8
CVE-2024-20797 Out-of-bounds access vulnerability in Adobe Animate that directly changes the rip when parsing FLA files.
High 7.8
CVE-2024-30271 Adobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability III.
High 7.8
CVE-2024-30272 Adobe Illustrator 2024 GIF file parsing Out-Of-Bound Write remote code execution vulnerabiity
High 7.8
CVE-2024-30273 Adobe Illustrator 2024 PS file Parsing Stack based Buffer Overflow Remote Code Execution Vulnerability

Medium19 Show

Medium 5.5
CVE-2024-20737 Adobe After Effect 2024 RGB File parsing Memory Corruption Vulnerability
Medium 5.5
CVE-2024-20766 Adobe Indesign 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure Vulnerabiity
Medium 5.5
CVE-2024-20770 Adobe Photoshop 2024 TIF File parsing Out-Of-Bound Read
Medium 5.5
CVE-2024-20771 Bridge 2024 MOV File parsing memory corruption
Medium 5.5
CVE-2024-20794 Adobe Animate 2024 WAV File Parsing Null Pointer Dereference
Medium 5.5
CVE-2024-20796 Adobe Animation SWF File Parsing Memory Corruption
Medium 5.5
CVE-2024-20798 Illustrator 2024 CDR File parsing Out of Bound Read Information disclosure vulnerability
Medium 5.4
CVE-2024-20778 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-20779 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-20780 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-26046 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-26047 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-26076 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-26079 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-26084 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-26087 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-26097 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-26098 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Medium 5.4
CVE-2024-26122 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)