Adobe Security Bulletin

Adobe has released updates for Photoshop for Windows and macOS. These updates resolve multiple critical and important vulnerabilities.  Successful exploitation could lead to arbitrary code execution in the context of the current user.   

Affected Product Versions

Solution

Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app’s update mechanism.  For more information, please reference this help page.

Vulnerability details

Acknowledgments

Adobe would like to thank the following researchers for reporting these issues and for working with Adobe to help protect our customers:   

• Francis Provencher working with Trend Micro Zero Day Initiative (CVE-2020-3771, CVE-2020-3778, CVE-2020-3790)
• Mat Powell of Trend Micro Zero Day Initiative (CVE-2020-3779, CVE-2020-3780, CVE-2020-3781, CVE-2020-3782)
• Steven Seeley (mr_me) of Source Incite working with Trend Micro Zero Day Initiative (CVE-2020-3791)
• Yu Zhou working with Trend Micro Zero Day Initiative (CVE-2020-3770, CVE-2020-3772, CVE-2020-3773)
• Yu Zhou(@yuzhou6666) of 小鸡帮 (CVE-2020-3774, CVE-2020-3775, CVE-2020-3776, CVE-2020-3777)
• Kushal Arvind Shah of Fortinet's FortiGuard Labs (CVE-2020-3783, CVE-2020-3784, CVE-2020-3785, CVE-2020-3786, CVE-2020-3787, CVE-2020-3788, CVE-2020-3789)

Revisions

March 20, 2020: Updated acknowledgement for CVE-2020-3783, CVE-2020-3784, CVE-2020-3785, CVE-2020-3786, CVE-2020-3787, CVE-2020-3788, CVE-2020-3789.