Adobe has released security updates to address multiple vulnerabilities in its software products. The affected software includes: Adobe Experience Manager, Adobe Premiere Pro, Adobe ColdFusion, Adobe Bridge, Adobe Lightroom and Adobe Animate.

Affected Systems

The following system versions are known to be affected, but not limited to:

• Adobe Experience Manager (AEM): Version AEM Cloud Service (CS) & 6.5.19.0 and earlier versions  for Windows & macOS.

• Adobe Premiere Pro: Version 24.1 and earlier versions for Windows and macOS.

• Adobe Premiere Pro: Version 23.6.2 and earlier versions for Windows and macOS.

• ColdFusion 2023: Update 6 and earlier versions for Windows and macOS.

• ColdFusion 2021: Update 12 and earlier versions for Windows and macOS.

• Adobe Bridge: Version 13.0.5 and earlier versions for Windows and macOS.

• Adobe Bridge: Version 14.0.1 and earlier versions for Windows and macOS.

• Lightroom: Version 7.1.2 and earlier versions for macOS.

• Adobe Animate 2023: Version 23.0.3 and earlier versions for Windows and macOS.

• Adobe Animate 2024: Version 24.0 and earlier versions for Windows and macOS.

Security Risks

The identified vulnerabilities in Adobe software, if successfully exploited, could grant an attacker control over affected systems, enabling them to execute malicious activities.  

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

1. Upgrade to the latest supported version of the installed software as soon as possible to ensure continued access to technical support and security patches.

The recommended software versions to upgrade to are as follows, but not limited to:

• Adobe Experience Manager (AEM): Version AEM Cloud Service Release 2024.03 & 6.5.20.0 for Windows & macOS.

• Adobe Premiere Pro: Version 24.2.1 and 23.6.4 for Windows and macOS.

• ColdFusion 2023: Update 7 for Windows and macOS

• ColdFusion 2021: Update 13 for Windows and macOS

• Adobe Bridge: Version 13.0.6 for Windows and macOS

• Adobe Bridge: Version 14.0.2 for Windows and macOS

• Lightroom: Version 7.2 for macOS

• Adobe Animate 2023: Version 23.0.4 for Windows and macOS

• Adobe Animate 2024: Version 24.0.1 for Windows and macOS

2. Before performing any update tasks, ensure that you have a backup of your data.

3. Ensure that all employees in their organization understand the significance of installing security updates and keeping their software up to date.

For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009

References

• Adobe Security Bulletins and Advisories.  

• Latest Adobe Security Updates for Products.