Adobe has released security updates to address multiple vulnerabilities in its software, including Adobe Acrobat and Reader, Adobe Commerce and Magneto Open Source, Adobe Dimension, and Adobe XMP Toolkit SDK on Windows and macOS systems.

Affected Systems

The following system versions are affected:

• Acrobat DC and Reader: Version 23.003.20244 and prior. 

• Acrobat 2020 and Reader: version 20.005.30467 and prior.

• Adobe Commerce and Magneto Open Source: multiple versions.  

• Adobe Dimension: version 3.4.9 and prior.

• Adobe XMP-Toolkit-SDK: 2022.06 and earlier versions.

Security Risks

The identified vulnerabilities in Adobe Acrobat and Reader, Adobe Commerce and Magneto Open Source, Adobe Dimension and Adobe XMP Toolkit SDK, if successfully exploited, could grant an attacker control over affected systems, enabling them to execute malicious activities.

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

• Upgrade to the latest supported version of the installed software as soon as possible to ensure continued access to technical support and security patches.

The recommended software versions to upgrade to are as follows:

• Acrobat DC and Reader: version 23.003.20269 for Windows and macOS.

• Acrobat 2020 and Reader: version 20.005.30516.10516 for Windows and macOS.

• Adobe Commerce and Magneto Open Source: multiple versions for all platform.

• Adobe Dimension: version 3.4.10 for Windows and macOS. 

• Adobe XMP-Toolkit-SDK: version 2023.07  for All platform.

• Before performing any update tasks, ensure that you have a backup of your data.

• Ensure that all employees in their organization understand the significance of installing security updates and keeping their software up to date.

For further information and support, please contact the National Cyber Security Authority (NCSA) by email to rwcsirt@ncsa.gov.rw or call us on 9009

References

• Adobe Security Bulletins and Advisories

• Latest Adobe Security Updates for Products