Alert: Adobe Security Updates – October 2023

13 October 2023

Adobe has released security updates to address multiple vulnerabilities in its software, including Adobe Bridge, Commerce & Magento Open Source and Photoshop for Windows & macOS.

Affected Systems

The following system versions are known to be affected:

Adobe Bridge: Versions 12.0.4 and earlier, 13.0.3 and earlier for Windows and macOS.
Adobe Commerce, Magento Open Source : Multiple versions for all platforms.
Adobe Photoshop 2022: Versions 23.5.5 and earlier and Adobe Photoshop 2023: versions 24.7 and earlierfor Windows and macOS.

Security Risks

The identified vulnerabilities in Adobe software, if successfully exploited, could grant an attacker control over affected systems, enabling them to execute malicious activities.

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

1. Upgrade to the latest supported version of the installed software as soon as possible to ensure continued access to technical support and security patches.

The recommended software versions to upgrade to are as follows:

Adobe Bridge: Versions 13.0.4 and 14.0.0 for Windows and macOS
Adobe Commerce, Magento Open Source : Multiple versions for all platforms.
Adobe Photoshop 2023: Versions 24.71 and Adobe Photoshop 2024: versions 25.0 for Windows and macOS.

2. Before performing any update tasks, ensure that you have a backup of your data.

3. Ensure that all employees in their organization understand the significance of installing security updates and keeping their software up to date.

For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009

References