Adobe Security Updates — December 2024

Tuesday, 10 December 2024

Vulnerabilities: 163
Critical: 3
High: 38
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 3

Critical 9.3
CVE-2024-54032 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
Critical 9.3
CVE-2024-54034 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Critical 9.3
CVE-2024-54036 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

All vulnerabilities 163

Critical3 Show

Critical 9.3
CVE-2024-54032 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
Critical 9.3
CVE-2024-54034 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Critical 9.3
CVE-2024-54036 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

High38 Show

High 8.1
CVE-2024-54037 Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
High 7.8
CVE-2024-45155 Animate | Access of Uninitialized Pointer (CWE-824)
High 7.8
CVE-2024-45156 Animate | NULL Pointer Dereference (CWE-476)
High 7.8
CVE-2024-49513 Not a product | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-49530 Acrobat Reader | Use After Free (CWE-416)
High 7.8
CVE-2024-49537 After Effects | Stack-based Buffer Overflow (CWE-121)
High 7.8
CVE-2024-49538 Illustrator | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-49543 InDesign Desktop | Stack-based Buffer Overflow (CWE-121)
High 7.8
CVE-2024-49544 InDesign Desktop | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-49545 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
High 7.8
CVE-2024-49551 Media Encoder | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-49552 Media Encoder | Heap-based Buffer Overflow (CWE-122)
High 7.8
CVE-2024-49553 Media Encoder | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-52982 Animate | Improper Input Validation (CWE-20)
High 7.8
CVE-2024-52983 Animate | Integer Overflow or Wraparound (CWE-190)
High 7.8
CVE-2024-52984 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
High 7.8
CVE-2024-52985 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
High 7.8
CVE-2024-52986 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
High 7.8
CVE-2024-52987 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
High 7.8
CVE-2024-52988 Animate | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-52989 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
High 7.8
CVE-2024-52990 Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124)
High 7.8
CVE-2024-52994 Substance3D - Sampler | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-52995 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)
High 7.8
CVE-2024-52996 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)
High 7.8
CVE-2024-52997 Photoshop Desktop | Use After Free (CWE-416)
High 7.8
CVE-2024-52999 Substance3D - Modeler | Heap-based Buffer Overflow (CWE-122)
High 7.8
CVE-2024-53000 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-53001 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-53002 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-53003 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-53953 Animate | Use After Free (CWE-416)
High 7.8
CVE-2024-53954 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)
High 7.8
CVE-2024-53955 Bridge | Integer Underflow (Wrap or Wraparound) (CWE-191)
High 7.8
CVE-2024-53956 Premiere Pro | Heap-based Buffer Overflow (CWE-122)
High 7.8
CVE-2024-53957 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)
High 7.8
CVE-2024-53958 Substance3D - Painter | Out-of-bounds Write (CWE-787)
High 7.8
CVE-2024-53959 Adobe Framemaker | Stack-based Buffer Overflow (CWE-121)

Medium120 Show

Low2 Show