Thursday, February 27, 2025
HomeCyber Security NewsAdobe Releases Security Updates that Fixes Critical Vulnerabilities with Photoshop CC and...

Adobe Releases Security Updates that Fixes Critical Vulnerabilities with Photoshop CC and Digital Editions

Published on

SIEM as a Service

Follow Us on Google News

Adobe released security updates for the month of March 2019, that covers critical vulnerabilities with Adobe Photoshop CC and Adobe Digital Editions.

Successful exploitation of these vulnerabilities allows an attacker to run the arbitary code with the context of the current user.

Adobe Photoshop CC

Adobe published security update for Photoshop CC that resolves the critical vulnerability in Photoshop CC 19.1.7 as well as 20.0.2 and it’s earlier versions for Windows and macOS.

An attacker could exploit the vulnerability to run the arbitrary code on the victim’s machine with the context of the current user. The vulnerability labeled as critical and can be tracked as CVE-2019-7094.

Affected Versions

Photoshop CC 19.1.7 and earlier
Photoshop CC 20.0.2 and earlier

Fixed Versions

Photoshop CC 19.1.8
Photoshop CC 20.0.4

Adobe Digital Editions

The security update resolves the critical vulnerability with Adobe Digital Editions, which allows an attacker to run the Arbitrary Code in the context of the current user.

The vulnerability labeled as critical and can be tracked as CVE-2019-7095.

Affected Versions

Adobe Digital Editions 4.5.10.185749 and below

Fixed Versions

Adobe Digital Editions 4.5.10.186048

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Master in Wireshark Network Analysis to keep your self-updated.

75 Vulnerabilities Fixed with Adobe Security Updates for February 2019

Adobe Released Security Patches for Digital Editions and Connect

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Silver Fox APT Hackers Target Healthcare Services to Steal Sensitive Data

A sophisticated cyber campaign orchestrated by the Chinese Advanced Persistent Threat (APT) group, Silver...

Ghostwriter Malware Targets Government Organizations with Weaponized XLS File

A new wave of cyberattacks attributed to the Ghostwriter Advanced Persistent Threat (APT) group...

LCRYX Ransomware Attacks Windows Machines by Blocking Registry Editor and Task Manager

The LCRYX ransomware, a malicious VBScript-based threat, has re-emerged in February 2025 after its...

Threat Actors Using Ephemeral Port 60102 for Covert Malware Communications

Recent cybersecurity investigations have uncovered a sophisticated technique employed by threat actors to evade...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Silver Fox APT Hackers Target Healthcare Services to Steal Sensitive Data

A sophisticated cyber campaign orchestrated by the Chinese Advanced Persistent Threat (APT) group, Silver...

Ghostwriter Malware Targets Government Organizations with Weaponized XLS File

A new wave of cyberattacks attributed to the Ghostwriter Advanced Persistent Threat (APT) group...

LCRYX Ransomware Attacks Windows Machines by Blocking Registry Editor and Task Manager

The LCRYX ransomware, a malicious VBScript-based threat, has re-emerged in February 2025 after its...