Patch/Configuration Management, Vulnerability Management

Adobe issues 32 fixes for February’s Patch Tuesday

February 9, 2016

Adobe's February 2016 Patch Tuesday includes 32 fixes for various versions of Photoshop and Bridge, Flash Player, Experience Manager and Connect—many of which secure critical vulnerabilities.

In four separate security bulletins, Adobe named the impacted products as:

Adobe Photoshop CC, versions 16.1.1 (2015.1.1) and earlier; and Adobe Bridge CC, versions 6.1.1 and earlier.
Versions of Adobe Flash Player Desktop Runtime, Adobe Flash Player Extended Support Release, Adobe Flash Player for Google Chrome, Adobe Flash Player for Microsoft Edge and Internet Explorer 11, Adobe Flash Player for Internet Explorer 11, Adobe Flash Player for Linux, AIR Desktop Runtime, AIR SDK and AIR SDK & Compiler
Adobe Experience Manager, versions 5.6.1, 6.0.0 and 6.1.0
Adobe Connect, versions 9.4.2 and earlier

The Photoshop and Bridge patches fix memory corruption vulnerabilities that could result in code execution. The Flash Player fixes resolve a variety of vulnerabilities that could also result in code execution. The Experience Manager patches address flaws that could lead to information disclosure. And finally, the Connect repairs fix important input validation and content spoofing issues.

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.

Vulnerability Management

Apple patches TCC bypass vulnerability

SC StaffDecember 19, 2024

The vulnerability, tracked as CVE-2024-44131, was discovered in the FileProvider component and has been fixed in iOS 18, iPadOS 18, and macOS Sequoia 15 through improved validation of symbolic links.

concept of leaky software, data with a tap sticking out.3d illustration

Data Security

Misconfiguration exposes Virtavo security cam user data

SC StaffDecember 18, 2024

Over 8.7 million records, many of which are duplicates, were discovered within the server, including user phone numbers, network information, device identifiers, performance metrics, and other personal details, according to Cybernews researchers.