[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDPzjIZPTDW9GpcFElWuzssyoKDRTXp0B6urIGhKUFBo":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":102},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"f1397009-ce3e-4164-8ef5-b13f0d48dadc","Adobe Patches 140 Vulnerabilities Across 10 Products","adobe-patches-140-vulnerabilities-across-10-products-87a5f4","The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge. The post Adobe Patches 140 Vulnerabilities Across 10 Products appeared first on SecurityWeek.","Adobe has released security updates addressing approximately 140 vulnerabilities across 10 of its products. The fixes include critical bugs in Adobe ColdFusion, high-severity flaws in Content Credentials SDK, and arbitrary code execution vulnerabilities in Photoshop and Substance 3D Stager. While Adobe is not aware of any in-the-wild exploitation, Adobe Commerce is noted as a historically targeted product.","Adobe patches 140 vulnerabilities across 10 products including Photoshop, Commerce, and ColdFusion.","https:\u002F\u002Fwww.securityweek.com\u002Fadobe-patches-140-vulnerabilities-across-10-products\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F07\u002FAdobe.jpg","2026-10-13T17:14:42+00:00","2026-10-13T18:00:15.811981+00:00",8,[17,20,22,24,26,28],{"name":18,"type":19},"Commerce","product",{"name":21,"type":19},"Photoshop",{"name":23,"type":19},"ColdFusion",{"name":25,"type":19},"Content Credentials SDK",{"name":27,"type":19},"Substance 3D Stager",{"name":29,"type":19},"FrameMaker","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,38],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[],[21,23,25],{"controls":46,"vendors":101},[47,76],{"slug":48,"name":49,"problem":50,"products":51},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":77,"name":78,"problem":79,"products":80},"patch-management","Automated patch management","Known holes get closed in days, not months.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":77,"product_name":98,"url":99,"description":100},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[],{"slug":103,"title":104,"body":105,"framework_refs":106,"framework_notes":115},"adobe-releases-massive-140-vulnerability-patch-batch-across-10-products","Adobe Releases Massive 140-Vulnerability Patch Batch Across 10 Products","Adobe's release of patches for approximately 140 vulnerabilities across 10 products underscores the scale of risk that unpatched commercial software introduces into enterprise environments. Critical flaws in products like ColdFusion and Adobe Commerce are particularly dangerous, as these are internet-facing applications with a history of active exploitation in the wild. Arbitrary code execution vulnerabilities in tools like Photoshop represent a serious threat to creative and enterprise workstations if left unpatched. Organizations that delay applying vendor patches — especially for historically targeted products — dramatically increase their window of exposure. Timely patch management is not optional; it is a foundational security control that directly reduces the attack surface.",[107,108,109,110,111,112,113,114],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","ITIL Change Management: Emergency Change Procedures","ISO\u002FIEC 27001: A.12.6.1 Management of Technical Vulnerabilities","OWASP Top 10: A06:2021 – Vulnerable and Outdated Components",{}]