Get the September 2022 Adobe Patch Tuesday updates

by Alexandru Poloboc
Alexandru Poloboc
Alexandru Poloboc
News Editor
With an overpowering desire to always get to the bottom of things and uncover the truth, Alex spent most of his time working as a news reporter, anchor,... read more
Affiliate Disclosure
  • Are you waiting on your monthly Patch Tuesday update rollout?
  • Adobe has just finished releasing a new set of patches today.
  • All the download links you need are right here in this article.
adobe patch tuesday

Many of you have surely been anxiously waiting for the Adobe Patch Tuesday rollout, and we’re here to make it a bit easier for you to find what you’re looking for.

No, Microsoft isn’t the only company that has such a rollout on a monthly basis, so in this article, we’re going to talk about Adobe and some of the patches for their products.

And, as you know we do every month, we will also include links to the download source, so you don’t have to scour the internet to find them.

Adobe releases updates for 63 CVEs

However, before we begin, let’s also take a look at what happened in August 2022, when Adobe released 25 CVEs in four patches for Acrobat and Reader, Commerce, and FrameMaker.

The highlight of last month’s release was definitely the FrameMaker update which addressed a combination of six CVEs, five of which could lead to code execution.

It should absolutely go without saying that the most severe of these could allow code execution if an attacker convinces a target to open a specially crafted PDF document.

Now that that’s out of the way, let’s get back to the present and explore what the company has prepared for its users as a part of the September batch of patches.

This month, September 2022, we are looking at security fixes for software such as Bridge, InDesign, Photoshop, InCopy, Animate, and Illustrator.

InDesign

We are going to start with the update for InDesign this time, which is also the largest patch this month for Adobe products.

Adobe had to fix eight Critical-rated and 10 Important-rated vulnerabilities, the most severe of these could lead to code execution if a specially crafted file is opened on an affected system

Affected versions

Product Affected version Platform
Adobe InDesign 17.3 and earlier versions Windows and macOS 
Adobe InDesign 16.4.2 and earlier versions Windows and macOS 

Photoshop

There are so many people using Adobe Photoshop that this message should be treated with the upmost importance.

This month’s Photoshop patch fixes 10 CVEs, 9 of which are rated Critical. As well as in the case of InDesign, an attacker can get code execution if they can convince a user to open a malicious file.

Affected versions

Product Affected version Platform
Photoshop 2021 22.5.8 and earlier versions      Windows and macOS
Photoshop 2022 23.4.2 and earlier versions Windows and macOS

InCopy

We’re now going to look at some Adobe software that isn’t as popular or widely used as Photoshop or Reader but needed fixing nonetheless.

For September 2022, Adobe issued a fix patch for InCopy, meant to address fixes five similar code execution bugs and two info disclosure bugs.

Affected versions

Product Affected version Platform
Adobe InCopy   17.3 and earlier version Windows and macOS
Adobe InCopy   16.4.2 and earlier version Windows and macOS

Animate

Yes, this month we are also getting an Adobe Animate patch, even though this software hasn’t been susceptible to attacks in quite some time now.

That being said, know that, for September, Adobe Animate also receives patches for two Critical-rated code execution bugs.

Affected versions

Product Version Platform
Adobe Animate 2021 21.0.11 and earlier versions
      
Windows and macOS
Adobe Animate 2022 22.0.7 and earlier versions Windows and macOS

Bridge

Next, we’re going to take a closer look at the update for Adobe Bridge, one that corrects 10 Critical-rated code execution bugs and two Important-rated info disclosure bugs.

Some pretty nasty bugs got fixed in this month’s Patch Tuesday release, so it makes you wonder what else Adobe is hiding behind closed doors.

Affected versions

Product Version Platform
Adobe Bridge   12.0.2 and earlier versions  Windows  and macOS
Adobe Bridge   11.1.3 and earlier versions  Windows  and macOS

Illustrator

We can’t end this article without also taking a peek at the updates that Adobe has prepared for the Illustrator application.

Thus, one of the three Illustrator vulnerabilities getting fixed could also lead to code execution, which really comes as no surprise anymore.

Just as in the cases described above, a user would need to open a malicious file with an affected software version in order for the attack to begin.

Affected versions

Product Version Platform
Illustrator 2022 26.4 and earlier versions  Windows and macOS
Illustrator 2021 25.4.7 and earlier versions  Windows and macOS

Also, Adobe managed to patch Experience Manager as well, and addressed 11 Important-rated bugs, primarily of the cross-site scripting (XSS) variety.

Remember that none of the bugs fixed by Adobe this month are listed as publicly known or under active attack at the time of release.

This is what you are looking at in terms of Patch Tuesday releases for Adobe for the month of September 2022, so hurry up and get the software.

What’s your take on this month’s release? Share your thoughts with us in the comments section below.

This article covers:Topics: