{"id":8574,"date":"2021-09-23T04:14:51","date_gmt":"2021-09-23T11:14:51","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8574"},"modified":"2023-03-07T15:04:26","modified_gmt":"2023-03-07T22:04:26","slug":"abode-patches-59-security-vulnerabilities","status":"publish","type":"patch_watch","link":"https:\/\/webdev.securin.xyz\/patch_watch\/abode-patches-59-security-vulnerabilities\/","title":{"rendered":"Abode Patches 59 Security Vulnerabilities"},"content":{"rendered":"<p dir=\"ltr\">Adobe released a series of patches that address 59 flaws in 15 of its products, including Adobe Acrobat and Reader, Premiere Pro, InCopy, and other Adobe products. We analyzed these weaknesses and highlighted the most important vulnerabilities that ought to be fixed on priority.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"width: 800px; height: 513px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-1-15.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Abode September Patches: Overview<\/h2>\n<p dir=\"ltr\">In this monthly rollout, 59 security vulnerabilities have been addressed that affect both Windows and macOS.<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">32 CVEs are classified as Arbitrary Code Execution bugs<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs with Privilege Escalation capabilities<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">12 CVEs are linked to Arbitrary file system write\/read<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">7 CVEs have Denial of Service capabilities<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">4 CVEs with Memory leak and 3 CVEs are Security feature bypass flaws.<\/p>\n<\/li>\n<\/ul>\n<p>None of the bugs fixed this month by Adobe are listed as publicly known or under active attack at the time of release.<\/p>\n<h2 dir=\"ltr\">Adobe Patch Latency Metrics<\/h2>\n<p dir=\"ltr\">We analyzed the latency metrics for the Adobe September patched vulnerabilities and found that the patches were released on the same date of discovery (September 14, 2021) which is ideal.\u00a041% of the CVEs got a second update released in the same month with an average latency of 6 days. These insights help us understand the approximate time that a vendor takes to deliver a fix.<\/p>\n<p>Meanwhile, NVD has not disclosed any details of the Adobe vulnerabilities that were discovered this month.<\/p>\n<h2 dir=\"ltr\">Severity Score<\/h2>\n<p dir=\"ltr\">Adobe Acrobat and Reader received fixes for 13 critical vulnerabilities. Adobe Premiere Pro, InCopy, ColdFusion, and Digital Editions received fixes for two critical vulnerabilities each. Adobe InDesign received fixes for 3 critical vulnerabilities. Adobe Premiere Elements received fixes for four critical vulnerabilities. Adobe SVG-Native-Viewer, Creative Cloud Desktop Application, Photoshop, Photoshop Elements, Genuine Service, and Experience Manager received fixes for one critical vulnerability each.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 508px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-2-17.png\" alt=\"\" \/><\/p>\n<p dir=\"ltr\">Patches are tagged <a href=\"https:\/\/helpx.adobe.com\/security\/severity-ratings.html\">Priority 2<\/a> for Adobe Acrobat and Reader, ColdFusion, and Experience Manager, while the remaining are labeled <a href=\"https:\/\/helpx.adobe.com\/security\/severity-ratings.html\">Priority 3.<\/a><\/p>\n<h2>Product Analysis<\/h2>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 360px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-3-10.png\" alt=\"\" \/><\/p>\n<h2>CWE Analysis<\/h2>\n<p dir=\"ltr\">When analyzed based on CWE classification, we found 64% of CVEs are categorized under the <a href=\"http:\/\/cwe.mitre.org\/top25\/archive\/2021\/2021_cwe_top25.html\">2021<\/a><a href=\"https:\/\/cwe.mitre.org\/top25\/archive\/2021\/2021_cwe_top25.html\"> CWE Top 25 Most Dangerous Software Weaknesses<\/a>, making the fixes the highest priority for this month.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 492px;\" src=\"\/wp-content\/uploads\/2015\/11\/patch-watch-3-11.png\" alt=\"\" \/><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shruZRsaU964SfsVr?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p><strong>Table: Adobe September\u00a0Patches 2021<\/strong><\/p>\n<p>Adobe had stated that this month&#8217;s update brings enhancements and fixes for some customer-reported issues. These disclosed vulnerabilities have some severe problems, however they all need user interactions and no public disclosure or exploitation reports.<\/p>\n<p dir=\"ltr\">We recommend all Adobe users to add these updates to your \u201cPatch Now\u201d cycle.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Adobe released a series of patches that address 59 flaws in 15 of its products, including Adobe Acrobat and Reader, Premiere Pro, InCopy, and other Adobe products. We analyzed these weaknesses and highlighted the most important vulnerabilities that ought to be fixed on priority. Abode September Patches: Overview In this monthly rollout, 59 security vulnerabilities [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14434,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[289,288],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch\/8574"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/14434"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=8574"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_category?post=8574"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}