We go beyond the status quo to uncover what’s next for ransomware and the related emerging risks. Kushal Arvind Shah, a bug hunter with Fortinet’s FortiGuard Labs, is credited for the three memory corruption bugs.Īdditional Adobe products receiving patches included Adobe Animate, Adobe Medium, Adobe After Effects, Adobe Media Encoder, Adobe Genuine Service, Adobe InCopy and Adobe Genuine Service.ĭownload our exclusive FREE Threatpost Insider eBook, “ 2021: The Evolution of Ransomware,” to help hone your cyber-defense strategies against this growing scourge. According to Adobe’s description of the flaws, three (CVE-2021-21103, CVE-2021-21104, CVE-2021-21105) are memory corruption bugs that open systems up to hackers, triggering arbitrary code execution on targeted systems. Three (CVE-2021-21044, CVE-2021-21038, CVE-2021-21086) of the vulnerabilities patched on Tuesday open systems up to out-of-bounds write attacks.Īdobe Illustrator received the next highest number of patches on Tuesday, with five critical code execution vulnerabilities fixed. Seven out of those bugs included arbitrary code execution bugs. In all, Adobe Acrobat received 10 critical and four important vulnerability patches. May Adobe Update Fixes Multiple Critical BugsĪlso part of Tuesday’s roundup of 43 fixes are several other bugs rated critical. “Users can update their product installations manually by choosing Help > Check for Updates,” Adobe wrote in its May security bulletin, posted Tuesday. Typically, those details become available after users have had an opportunity to apply the fix.

Windows & macOS Acrobat 2017 & Acrobat Reader 2017 (2017.011.30194 and earlier versions)Īdobe did not release technical specifics regarding the zero-day vulnerability.

Windows & macOS Acrobat 2020 & Acrobat Reader 2020 (2020.001.30020 and earlier versions).

macOS Acrobat DC & Reader DC (versions 2021.001.20149 and earlier).

Windows Acrobat DC & Reader DC (versions 2021.001.20150 and earlier).

However, the bug affects eight versions of the software, including those running on Windows and macOS systems.

and sign PDF across desktop, mobile, and web no matter if youre at the office, home, or on the go.

Windows users of Adobe Reader may be the only ones currently targeted. A speedy PDF reader alternative to Adobe Reader. Join Threatpost for “ Fortifying Your Business Against Ransomware, DDoS & Cryptojacking Attacks” a LIVE roundtable event on Wednesday, May 12 at 2:00 PM EDT for this FREE webinar sponsored by Zoho ManageEngine.Īccording to Adobe, the zero-day vulnerability, which is tracked as CVE-2021-28550, “has been exploited in the wild in limited attacks targeting Adobe Reader users on Windows.”

Acrobat reader dc vs 11