Get ready for the October 2022 Adobe Patch Tuesday updates

4 min. read

Published onOctober 12, 2022

published onOctober 12, 2022

Share this article

Improve this guide

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Key notes

We’re pretty sure that many of you have been anxiously waiting for the Adobe Patch Tuesday rollout, and we’re here to make it a bit easier for you to find what you’re looking for.

Indeed, Microsoft isn’t the only company that has such a rollout on a monthly basis, so in this article, we’re going to talk about Adobe and some of the patches for their products.

And, as you know we do every month, we will also include links to the download source, so you don’t have to scour the internet to find them.

Adobe releases updates for 29 CVEs

Before we begin, let’s also take a look at what happened in September 2022, when Adobe released 63 CVEs in four patches for InDesign, InCopy, and Photoshop.

The highlight of last month’s release was definitely the Photoshop update which addressed a combination of 10 CVEs, nine of which are rated as critical.

It should absolutely go without saying that the most severe of these could allow code execution if an attacker convinces a target to open a specially crafted file.

Now that that’s out of the way, let’s get back to the present and explore what the company has prepared for its users as a part of the October batch of patches.

ColdFusion

The fix issued for Adobe forColdFusionseems to be the most critical, with multiple CVSS 9.8 code execution bugs being addressed.

Know that there is also a fix for a bug in the Admin Component service, which uses a hard-coded password for the administrator user.

That being said, an attacker can leverage this vulnerability to bypass authentication on the system. Hard to imagine hard-coded credentials have existed in the product for so long without being discovered.

Commerce & Magento

Moving on, we are going to take a closer look at theCommerce and Magentoupdate, which addresses only one bug, but it’s a CVSS 10.

Thus, if you’re using either of these products, ensure you test and deploy this quickly to fix the stored cross-site scripting (XSS) bug.

We had an update for this app last month as well, so many users were actually confused to see another one this month.

The October patch forAcrobat and Readerwas designed to fix six bugs, with the most severe being stack-based buffer overflows that could lead to code execution.

Using this bug, a threat actor would need to trick someone into opening a specially crafted PDF to get arbitrary code exec.

Adobe Dimension

Adobe also released a fix forDimensionthat corrects nine bugs, eight of which are rated critical. Most of these are file parsing bugs and would require user interaction to exploit.

We should also mention that none of the bugs fixed by Adobe this month are listed as publicly known or under active attack at the time of release.

Furthermore, the company actually categorizes these updates as a deployment priority rating of 3, in case you were wondering.

This is what you are looking at in terms of Patch Tuesday releases for Adobe for the month of October 2022, so hurry up and get the software.

What’s your take on this month’s release? Share your thoughts with us in the comments section below.

Get ready for the October 2022 Adobe Patch Tuesday updates#

Adobe releases updates for 29 CVEs#

ColdFusion#

Commerce & Magento#

Adobe Dimension#

Get ready for the October 2022 Adobe Patch Tuesday updates

Adobe releases updates for 29 CVEs

ColdFusion

Commerce & Magento

Adobe Dimension