Adobe Security Bulletin

Adobe has released an update for Adobe Character Animator for Windows and macOS. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution and file service reads, privilege escalation, and application denial of service.  

Affected Versions

Solution

Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app’s update mechanism.  For more information, please reference this help page.

Download Center

For managed environments, IT administrators can use the Admin Console to deploy Creative Cloud applications to end users. Refer to this help page for more information.

Vulnerability details

Acknowledgments

Adobe would like to thank the following researchers for reporting these issues and for working with Adobe to help protect our customers:   

• (hy350) HY350 of Topsec Alpha Team CVE-2021-40762; CVE-2021-40768

• (yjdfy) CQY of Topsec Alpha Team CVE-2021-40763; CVE-2021-40764; CVE-2021-40765; CVE-2021-40767

• Mat Powell working with Trend Micro Zero Day Initiative (CVE-2021-40769) 
• Francis Provencher working with Trend Micro Zero Day Initiative (CVE-2021-40766)
  

Revisions

• October 27th, 2021 - Updated acknowledgments for CVE-2021-40769

For more information, visit https://helpx.adobe.com/security.html, or email PSIRT@adobe.com