网安资讯详情 - SecLens 情报雷达

Security updates available for Adobe Format Plugins | APSB26-65

来源： adobe_security · 发布时间 2026-06-09 08:00 (UTC+08:00) · 抓取时间 2026-06-17 18:35 (UTC+08:00)

原文链接

摘要

Adobe has released an update for Adobe Format Plugins. This update addresses critical vulnerabilities that could lead to arbitrary code execution.

正文

Adobe has released an update for Adobe Format Plugins. This update addresses critical vulnerabilities that could lead to arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates. Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism. For more information, please reference this help page . For managed environments, IT administrators can use the Admin Console to deploy Creative Cloud applications to end users. Refer to this help page for more information. Affected products: - Adobe Format Plugins | 1.1.2 and earlier versions | All Solutions: - Adobe Format Plugins | 1.1.3 | All (Priority 3; Download Center) Vulnerabilities: - Heap-based Buffer Overflow ( CWE-122 ) | Arbitrary code execution | Critical | CVSS 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Heap-based Buffer Overflow ( CWE-122 ) | Arbitrary code execution | Critical | CVSS 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

标签

• contains:cve
• priority:3
• product:adobe-format-plugins
• vendor:adobe

扩展字段

{
  "affected_products": [
    {
      "platform": "All",
      "product": "Adobe Format Plugins",
      "version": "1.1.2 and earlier versions"
    }
  ],
  "bulletin_id": "APSB26-65",
  "detail_url": "https://helpx.adobe.com/security/products/formatplugins/apsb26-65.html",
  "last_updated": "06/09/2026",
  "originally_posted": "06/09/2026",
  "priority": "3",
  "solution_paragraphs": [
    "Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism. For more information, please reference this help page .",
    "For managed environments, IT administrators can use the Admin Console to deploy Creative Cloud applications to end users. Refer to this help page for more information."
  ],
  "solutions": [
    {
      "availability": "Download Center",
      "availability_url": null,
      "platform": "All",
      "priority": "3",
      "product": "Adobe Format Plugins",
      "version": "1.1.3"
    }
  ],
  "summary_paragraphs": [
    "Adobe has released an update for Adobe Format Plugins. This update addresses critical vulnerabilities that could lead to arbitrary code execution.",
    "Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates."
  ],
  "vulnerabilities": [
    {
      "CVE Numbers": "CVE-2026-48291",
      "CVSS base score": "7.8",
      "CVSS vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "Severity": "Critical",
      "Vulnerability Category": "Heap-based Buffer Overflow ( CWE-122 )",
      "Vulnerability Impact": "Arbitrary code execution"
    },
    {
      "CVE Numbers": "CVE-2026-48292",
      "CVSS base score": "7.8",
      "CVSS vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "Severity": "Critical",
      "Vulnerability Category": "Heap-based Buffer Overflow ( CWE-122 )",
      "Vulnerability Impact": "Arbitrary code execution"
    }
  ]
}