Adobe patches about 110 flaws across nine products
Original title: Adobe Patches 110 Vulnerabilities Across 9 Products
Six Adobe Connect issues score CVSS 10, and Adobe says it knows of no attacks on the new fixes.
Adobe’s November 2026 updates fix roughly 110 vulnerabilities in Experience Manager, Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere. Critical Connect and AEM issues include SSRF, path traversal, incorrect authorization, CRLF injection, XXE, code injection, SQL injection, and XSS, with impacts including privilege escalation and arbitrary code execution. Thirty-eight flaws were resolved in AEM and Connect. Connect and AEM patches are priority 2; the rest are priority 3.
- High-severity bugs were fixed in After Effects, Media Encoder, Premiere, Dimension, Audition, and Photoshop.
- The Content Credentials Rust SDK and C2PA Tool received about a dozen low- and medium-severity fixes.
- Priority 3 means Adobe considers those issues unlikely to be exploited in the wild.
Impact: Privilege escalation and arbitrary code execution
| Product | Affected |
|---|---|
| Adobe Experience Manager | — |
| Adobe Connect | — |
| Adobe After Effects | — |
| Adobe Media Encoder | — |
| Adobe Premiere | — |
| Adobe Dimension | — |
| Adobe Audition | — |
| Adobe Photoshop | — |
| Adobe Content Credentials SDK | — |
- 1.Install Adobe’s November 2026 patches for the nine affected products.
- Vendors
- Adobe
From the original article
1 min read at securityweek.com
Adobe has fixed vulnerabilities in AEM, Premiere, Photoshop, After Effects, Connect, Audition, Dimension, Content Credentials SDK, and Media Encoder. The post Adobe Patches 110 Vulnerabilities Across 9 Products appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.