Cert-In-Advisories

[CIVN-2026-0085] Multiple Vulnerabilities in Adobe Products

By TeamwinPublished On: February 13, 2026

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in Adobe Products

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: CRITICAL

Software Affected

Adobe Audition versions prior to 25.6 and 26.0 for Windows and macOS

Adobe After Effects versions prior to 25.6.4 and 26.0 for Windows and macOS

Adobe InDesign versions prior to ID21.2 and ID20.5.2 for Windows and macOS

Adobe Substance 3D Designer versions prior to 15.1.2 for all platforms

Adobe Substance 3D Stager versions prior to 3.1.7 for Windows and macOS

Adobe Bridge versions prior to 15.1.4 (LTS) for Windows and macOS

Adobe Bridge versions prior to 16.0.2 for Windows and macOS

Adobe Substance 3D Modeler versions prior to 1.22.6 for All platforms

Lightroom Classic versions prior to 15.1.1 for All platforms

Lightroom Classic versions prior to 14.5.2 LTS for All platforms

Adobe DNG Software Development Kit (SDK) versions prior to DNG SDK 1.7.2 build 2410 for All platforms

Overview

Multiple Vulnerabilities have been reported in Adobe products which could be exploited by an attacker to execute arbitrary code, gain access to sensitive information, or can cause denial-of-service (DoS) condition on the targeted system.

Target Audience:

System administrators, Security teams or end-users of Adobe software products.

Risk Assessment:

High risk of unauthorized access to sensitive data, system compromise.

Impact Assessment:

Potential for data theft, remote code execution or service disruption.

Description

Multiple vulnerabilities exist in the Adobe products due to heap-based buffer overflow, out-of-bounds write, out-of-bounds read, use-after-free, integer overflow or wraparound, type confusion, NULL pointer dereference, and access of memory location after end of buffer issues.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, gain access to sensitive information, or can cause denial-of-service (DoS) condition on the targeted system.

Solution

Apply appropriate updates as mentioned in the Adobe Security Bulletin:

https://helpx.adobe.com/security/products/audition/apsb26-14.html

https://helpx.adobe.com/security/products/after_effects/apsb26-15.html

https://helpx.adobe.com/security/products/indesign/apsb26-17.html

https://helpx.adobe.com/security/products/substance3d_designer/apsb26-19.html

https://helpx.adobe.com/security/products/substance3d_stager/apsb26-20.html

https://helpx.adobe.com/security/products/bridge/apsb26-21.html

https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-22.html

https://helpx.adobe.com/security/products/lightroom/apsb26-06.html

https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html

Vendor Information

Adobe

https://helpx.adobe.com/security.html

References