1.0 Introduction
Recently, Adobe released security updates to address multiple vulnerabilities across various Adobe products including Acrobat Reader, Substance 3D suite, Illustrator, and InDesign.
2.0 Impact
These vulnerabilities, if exploited, could allow attackers to execute arbitrary code, potentially leading to full system compromise.
3.0 Affected Products
- Acrobat DC and Reader DC (25.001.20428 and earlier)
- Acrobat 2024 24.001.30225 and earlier versions
- Acrobat 2020 20.005.30748 and earlier versions
- Acrobat Reader 2020 20.005.30748 and earlier versions
- Adobe Substance 3D Sampler (4.5.2 and earlier)
- Illustrator 2025 29.2.1 and earlier
- Illustrator 2024 28.7.4 and?earlier?versions
- Adobe Substance 3D Painter (10.1.2 and earlier)
- Adobe InDesign (ID20.1 and earlier, ID19.5.2 and earlier)
- Adobe Substance 3D Modeler (1.15 and earlier)
- Adobe Substance 3D Designer (14.1 and earlier)
4.0 Recommendations
CyberSecurity Malaysia encourages users and administrators to review the following
Adobe Security Bulletins
and apply the necessary updates:
- https://helpx.adobe.com/security/products/substance3d_designer/apsb25-22.html
- https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-21.html
- https://helpx.adobe.com/security/products/indesign/apsb25-19.html
- https://helpx.adobe.com/security/products/substance3d_painter/apsb25-18.html
- https://helpx.adobe.com/security/products/illustrator/apsb25-17.html
- https://helpx.adobe.com/security/products/substance3d-sampler/apsb25-16.html
- https://helpx.adobe.com/security/products/acrobat/apsb25-14.html
Generally, Cyber999 advise the users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999 Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
Business Hours: Mon - Fri 08:30 -17:30 MYT
Web:
https://www.mycert.org.my
5.0 References
- https://helpx.adobe.com/security/security-bulletin.html
- https://helpx.adobe.com/security/products/substance3d_designer/apsb25-22.html
- https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-21.html
- https://helpx.adobe.com/security/products/indesign/apsb25-19.html
- https://helpx.adobe.com/security/products/substance3d_painter/apsb25-18.html
- https://helpx.adobe.com/security/products/illustrator/apsb25-17.html
- https://helpx.adobe.com/security/products/substance3d-sampler/apsb25-16.html
- https://helpx.adobe.com/security/products/acrobat/apsb25-14.html