Adobe Security Updates — June 2024

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

• Critical 9.8
  CVE-2024-34102 Exploited Public exploit XXE can expose crypt key and other secrets granting full admin access
  EPSS 100%

Critical 3

• Critical 10.0
  CVE-2024-30299 Tenable Vulnerability Disclosure | API Auth Bypass
  EPSS 1.1%
• Critical 9.8
  CVE-2024-30300 Tenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS Worker
• Critical 9.1
  CVE-2024-34108 Large attack surface through legit webhook usage in Adobe Commerce
  EPSS 1.4%

All vulnerabilities 165