Adobe security updates address 2 critical code execution flaws in Photoshop
21.8.18 securityaffairs Vulnerebility

Yesterday Adobe released security updates for two critical code execution vulnerabilities affecting Windows and macOS versions of Photoshop CC.
Adobe released updates to address two critical code executions flaws that affect Photoshop for Windows and macOS versions of Photoshop CC.

The vulnerabilities, tracked as CVE-18-12810 and CVE-18-12811, are memory corruption issues that could be exploited by a remote attacker to execute arbitrary code in the context of the targeted user.

“Adobe has released updates for Photoshop CC for Windows and macOS. These updates resolve critical vulnerabilities in Photoshop CC 19.1.5 and earlier 19.x versions, as well as 18.1.5 and earlier 18.x versions. Successful exploitation could lead to arbitrary code execution in the context of the current user.” reads the security advisory published by Adobe.

Adobe addressed both flaws with the release of versions 19.1.6 and 18.1.6.

The vulnerabilities affect Photoshop CC 18 version 19.1.5 and earlier 19.x versions, and Photoshop CC 2017 18.1.5 and earlier 18.x versions.

The Adobe Patch Tuesday for August 18 addressed a total of 11 vulnerabilities in Flash Player, the Creative Cloud Desktop Application, Experience Manager, and Acrobat and Reader.

None of the patched vulnerabilities been exploited by attackers in the wild.