CSIRT-CAN – Centro de Respuesta a Incidentes de Seguridad de Canarias

Adobe Security Update - May 2025

Adobe Security Update - May 2025

Adobe has released a critical security update addressing at least 39 vulnerabilities across various products, including Adobe ColdFusion, Photoshop, Illustrator, Lightroom, Dreamweaver, Connect, InDesign, Substance 3D Painter, Bridge, and Dimension.

Analysis

The identified vulnerabilities span a variety of products affecting both Windows and macOS platforms. Successful exploitation of these flaws could allow attackers to execute arbitrary code, bypass security features, access sensitive information, or cause service disruptions. Adobe has stated it is not aware of these vulnerabilities being actively exploited prior to the patches being available.

For more detailed information on the vulnerabilities, it is recommended to review the Adobe security bulletin.

Affected Resources

  • Adobe ColdFusion: versions CF2023 up to 2023.0.1.314, CF2021 up to 2021.0.10.314.
  • Adobe Photoshop: versions 2023 up to 24.7.3, 2024 up to 25.9.1.
  • Adobe Illustrator: Versions not specified.
  • Adobe Lightroom: Versions not specified.
  • Adobe Dreamweaver: Versions not specified.
  • Adobe Connect: Versions not specified.
  • Adobe InDesign: Versions not specified.
  • Adobe Substance 3D Painter: Versions not specified.
  • Adobe Bridge: Versions not specified.
  • Adobe Dimension: Versions not specified.

Recommendations

Adobe recommends users and system administrators apply the corresponding updates without delay.

  • Adobe ColdFusion: CF2023 update to 2023.0.1.315, CF2021 to 2021.0.10.315.
  • Adobe Photoshop: 2023 update to 24.7.4, 2024 to 25.11.
  • Adobe Illustrator: Update available on the official site.
  • Adobe Lightroom: Update available on the official site.
  • Adobe Dreamweaver: Update available on the official site.
  • Adobe Connect: Update available on the official site.
  • Adobe InDesign: Update available on the official site.
  • Adobe Substance 3D Painter: Update available on the official site.
  • Adobe Bridge: Update available on the official site.
  • Adobe Dimension: Update available on the official site.

Specific corrected versions may vary by product and platform. Please refer to Adobe’s official site for precise details.

References