Adobe September Security Update: fix critical security vulnerabilities

On September 10, Adobe officially released the September security update, which fixes multiple vulnerabilities in Adobe’s various products, including Adobe Application Manager and Adobe Flash Player.

CVE-2018-15981

Vulnerability Overview:

Adobe Application Manager

Adobe has released a security update for Adobe Application Manager that fixes a security vulnerability.

The vulnerabilities are summarized as follows:

Vulnerability category Vulnerability impact severity CVE number
DLL hijacking Arbitrary code execution Important CVE-2019-8076
  • Affected version:
    Adobe Application Manager (installer) 10
  • Unaffected version:
    Adobe Application Manager (installer)  2019 Release

Adobe Flash Player

Adobe has released a security update for Adobe Flash Player that fixes 2 security vulnerabilities.

The vulnerabilities are summarized as follows:

Vulnerability category Vulnerability impact severity CVE number
Reuse after release Arbitrary code execution Critical CVE-2019-8070
Homology method execution Arbitrary code execution Critical CVE-2019-8069
  • Affected version:

Adobe Flash Player <= 32.0.0.238

Adobe Flash Player for Edge/IE 11 <= 32.0.0.207

  • Unaffected version:

Adobe Flash Player 32.0.0.255

Solution

Adobe has released a new version to fix the above vulnerabilities, users should upgrade your product to the unaffected version as soon as possible.