Adobe Security Bulletin

Security update available for Adobe Brackets

Release date: June 14, 2016

Vulnerability identifier: APSB16-20

Priority: 3

CVE number: CVE-2016-4164, CVE-2016-4165

Platform: Windows, Macintosh and Linux

Summary

Adobe has released a security update for Adobe Brackets for Windows, Macintosh and Linux. This update resolves a JavaScript injection vulnerability (CVE-2016-4164) and a vulnerability in the extension manager (CVE-2016-4165). Adobe recommends users update their product installation using the instructions provided in the “Solution” Section below.

Affected software versions

Product

Affected Version

Platform

Adobe Brackets

1.6 and earlier versions

Windows, Macintosh and Linux

Solution

Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version by following the instructions below:

Product

Updated version

Platform

Availability

Adobe Brackets

1.7

Windows, Macintosh and Linux

3

Vulnerability Details

  • This update resolves a JavaScript injection vulnerability, which could be abused in a cross-site scripting attack (CVE-2016-4164). 
  • This update resolves an input validation vulnerability in the extension manager (CVE-2016-4165).

Acknowledgments

Adobe would like to thank Kacper Rybczyński for reporting these issues (CVE-2016-4164 and CVE-2016-4165) and for working with Adobe to help protect our customers.  

 Adobe

Nhận trợ giúp nhanh chóng và dễ dàng hơn

Bạn là người dùng mới?

Adobe MAX 2024

Adobe MAX
Hội thảo sáng tạo

14–16/10 Bãi biển Miami và trực tuyến

Adobe MAX

Hội thảo sáng tạo

14–16/10 Bãi biển Miami và trực tuyến

Adobe MAX 2024

Adobe MAX
Hội thảo sáng tạo

14–16/10 Bãi biển Miami và trực tuyến

Adobe MAX

Hội thảo sáng tạo

14–16/10 Bãi biển Miami và trực tuyến