Overview
- On August 13, India’s CERT-In published Advisory CIVN-2025-0173 to warn of multiple critical vulnerabilities caused by memory corruption and authorization errors in Adobe software.
- Affected products range from creative tools such as Photoshop, Illustrator, InDesign and Animate to 3D apps in the Substance suite and Dimension, as well as business platforms including Adobe Commerce/Magento and FrameMaker.
- Successful exploitation could allow attackers to execute remote code, escalate privileges, steal sensitive data or trigger denial-of-service conditions on both Windows and macOS.
- Adobe has issued a security bulletin with patched releases and is urging users to install the latest versions without delay.
- There are no confirmed reports of active in-the-wild exploitation, but systems remain at high risk until updates are applied and devices are restarted.