Alert GCSA-26229 - Adobe Security Bulletin - 22 settembre 2026

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

   alert ID: GCSA-26229
       data: 23 settembre 2026
     titolo: Adobe Security Bulletin - 22 settembre 2026

******************************************************************

:: Descrizione del problema

   Adobe ha rilasciato i seguenti aggiornamenti di sicurezza

   APSB26-145 Security update available for Adobe InDesign
   APSB26-147 Security update available for Adobe Content Credentials
   APSB26-148 Security update available for Adobe Bridge
   APSB26-150 Security update available for Adobe Connect
   APSB26-151 Security update available for Adobe Experience Manager Forms JEE
   APSB26-155 Security update available for Adobe Substance 3D Modeler
   APSB26-157 Security update available for Adobe Premiere Pro

   Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

   Adobe InDesign
   Adobe Content Credentials
   Adobe Bridge
   Adobe Connect
   Adobe Experience Manager Forms JEE
   Adobe Substance 3D Modeler
   Adobe Premiere Pro


:: Impatto

   Esecuzione remota di codice arbitrario (RCE)
   Denial of Service (DoS)
   Acquisizione di privilegi piu' elevati (EoP)
   Bypass delle funzionalita' di sicurezza (SFB)


:: Soluzioni

   Aggiornare i prodotti alle versioni piu' recenti.

   Adobe InDesign ID21.6
   Adobe InDesign ID20.5.5

   Adobe Content Credentials Rust SDK c2pa-v0.90.17
   Adobe Content Credentials C2PA Tool c2patool-v0.27.17

   Adobe Bridge 15.1.8 (LTS)
   Adobe Bridge 16.0.7

   Adobe Connect 12.12
   Adobe Connect Android Mobile App 4.5

   Adobe Experience Manager (AEM) LTS Forms JEE Service Pack 3
   Adobe Experience Manager (AEM) Forms JEE 6.5.25 (AEMForms-6.5.0-0134 Hotfix)

   Adobe Substance 3D Modeler 1.22.8

   Adobe Premiere 26.5
   Adobe Premiere Pro 25.6.6


:: Riferimenti

   Adobe Security Bulletins e Advisories
   https://helpx.adobe.com/security.html
   https://helpx.adobe.com/security/products/indesign/apsb26-145.html
   https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-147.html
   https://helpx.adobe.com/security/products/bridge/apsb26-148.html
   https://helpx.adobe.com/security/products/connect/apsb26-150.html
   https://helpx.adobe.com/security/products/aem-forms/apsb26-151.html
   https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-155.html
   https://helpx.adobe.com/security/products/premiere_pro/apsb26-157.html

   Mitre CVE
   I riferimenti CVE sono disponibili nell'advisory originale.


GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert

-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCarOYZQAKCRDBnEyTZRJg
QmnfAKCJCA0SmOAQWpe5v9AtvoNjfEU5VgCgrxyKmsRooaxNrrZcacug2paun6Y=
=jpRm
-----END PGP SIGNATURE-----