Sistemas Afectados

• Adobe Connect 11.2.1
• Acrobat DC and Acrobat Reader DC version 2021.001.20155
• Acrobat 2020 and Acrobat Reader 2020 version 2020.001.30025
• Acrobat 2017 and Acrobat Reader 2017 version 2017.011.30196
• Photoshop 2020 21.2.8
• Photoshop 2021 22.4.1
• Adobe Experience Manager (AEM) 6.5.8.0
• Adobe Experience Manager (AEM)
• Creative Cloud Desktop Application (Installer) 2.4
• RoboHelp Server 2019.0.9
• Photoshop Elements (installer) 5.2
• Adobe Premiere Elements (installer) 5.2
• Adobe After Effects 18.2
• Adobe Animate 21.0.6

Descripción

Adobe ha publicado varias vulnerabilidades sobe varios de sus productos incluyendo la posibilidad de ejecutar código remoto.

Referencia

• https://helpx.adobe.com/security/products/connect/apsb21-36.html
• https://helpx.adobe.com/security/products/acrobat/apsb21-37.html
• https://helpx.adobe.com/security/products/photoshop/apsb21-38.html
• https://helpx.adobe.com/security/products/experience-manager/apsb21-39.html
• https://helpx.adobe.com/security/products/creative-cloud/apsb21-41.html
• https://helpx.adobe.com/security/products/photoshop_elements/apsb21-46.html
• https://helpx.adobe.com/security/products/premiere_elements/apsb21-47.html
• https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
• https://helpx.adobe.com/security/products/animate/apsb21-50.html
• CVE-2021-28551
• CVE-2021-28552
• CVE-2021-28554
• CVE-2021-28579
• CVE-2021-28582
• CVE-2021-28588
• CVE-2021-28594
• CVE-2021-28597
• CVE-2021-28600
• CVE-2021-28601
• CVE-2021-28602
• CVE-2021-28603
• CVE-2021-28604
• CVE-2021-28605
• CVE-2021-28606
• CVE-2021-28607
• CVE-2021-28608
• CVE-2021-28609
• CVE-2021-28610
• CVE-2021-28611
• CVE-2021-28612
• CVE-2021-28614
• CVE-2021-28615
• CVE-2021-28616
• CVE-2021-28617
• CVE-2021-28618
• CVE-2021-28619
• CVE-2021-28621
• CVE-2021-28620
• CVE-2021-28622
• CVE-2021-28623
• CVE-2021-28624
• CVE-2021-28625
• CVE-2021-28626
• CVE-2021-28627
• CVE-2021-28628
• CVE-2021-28629
• CVE-2021-28630
• CVE-2021-28631
• CVE-2021-28632
• CVE-2021-28633

Solución

Adobe recomienda actualizar sus sistemas lo antes posible para eliminar estas vulnerabilidades reportadas, así como la ejecución de sus productos con el mínimo privilegio permitido.