NOTICE: Apply Adobe security updates

Adobe has released security updates to address vulnerabilities in a variety of Adobe products. Some of the vulnerabilities could allow an attacker to take control of an affected system. In accordance with Adobe’s recommendation, Information Assurance (IA) recommends updating affected software within 30 days, after appropriate testing.

• Critical vulnerabilities have been identified in Adobe Acrobat, Reader, and ColdFusion. Successful exploitation could allow for arbitrary code execution.
• Important vulnerabilities have been identified in Adobe Flash Player and Creative Cloud Desktop Application. Successful exploitation could compromise data security, potentially allowing access to data, or could compromise processing resources in a user's computer.

As of today (February 13), IA is unaware of reports of any exploitation of these vulnerabilities in the wild. Exploitation of the most serious vulnerabilities in Acrobat, Reader, and ColdFusion could result in an attacker gaining control of the affected system. The most serious vulnerabilities in Flash and Creative Cloud Desktop Application could result in disclosure of information to an attacker.

IA recommends updating affected software within 30 days, after appropriate testing. Follow the links in the References below for the available downloads.

Technical details are available for each of the Adobe advisories at Adobe Bulletins and Advisories.

MiWorkspace machines are planned to be updated this week, after appropriate testing.

In general, the best protection for your devices is this: keep your software and apps up-to-date, do not click suspicious links in email, do not open shared documents or email attachments unless you are expecting them and trust the person who sent them, and only use secure, trusted networks. For more information, see Phishing & Suspicious Email, Secure Your Devices, and Secure Your Internet Connection on the U-M Safe Computing website.

• Security updates available for Adobe Acrobat and Reader | APSB19-07
• Security updates available for ColdFusion | APSB19-10
• Security updates available for Creative Cloud Desktop Application | APSB19-11
• Security updates available for Flash Player | APSB19-06