Alert GCSA-26006 - Adobe Monthly Security Update - gennaio 2026
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26006 data: 14 Gennaio 2026 titolo: Adobe Monthly Security Update - gennaio 2026 ****************************************************************** :: Descrizione del problema Adobe ha rilasciato i seguenti aggiornamenti di sicurezza con i quali risolve quasi 140 vulnerabilita'. APSB26-01 : Security update available for Adobe DreamWeaver APSB26-02 : Security update available for Adobe InDesign APSB26-03 : Security update available for Adobe Illustrator APSB26-04 : Security update available for Adobe InCopy APSB26-07 : Security update available for Adobe Bridge APSB26-08 : Security update available for Adobe Substance 3D Modeler APSB26-09 : Security update available for Adobe Substance 3D Stager APSB26-10 : Security update available for Adobe Substance 3D Painter APSB26-11 : Security update available for Adobe Substance 3D Sampler APSB26-12 : Security update available for Adobe Coldfusion APSB26-13 : Security update available for Adobe Substance 3D Designer Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Dreamweaver, versione 21.6 e precedenti per Windows e macOS InDesign ID21.x, versione ID21.0 per Windows e macOS InDesign, versione ID19.5.5 e precedenti per Windows e macOS Illustrator 2025, versione 29.8.3 e precedenti per Windows Illustrator 2026, versione 30.0 e precedenti per Windows InCopy 21.x, versione 21.0 per Windows e macOS InCopy, versione 19.5.5 e precedenti per Windows e macOS Bridge, versione 15.1.2 (LTS) e precedenti per Windows e macOS Bridge 16.x, versione 16.0 per Windows e macOS Substance 3D Modeler, versione 1.22.4 e precedenti Substance 3D Stager, versione 3.1.5 e precedenti per Windows e macOS Substance 3D Painter, versione 11.0.3 e precedenti Substance 3D Sampler, versione 5.1.0 e precedenti ColdFusion 2025, Update 5 e versioni precedenti ColdFusion 2023, Update 17 e versioni precedenti Substance 3D Designer, versione 15.0.3 e precedenti :: Impatto Esecuzione remota di codice arbitrario (RCE) Arbitrary File Write :: Soluzioni Aggiornare i prodotti alle versioni piu' recenti Dreamweaver 21.7 InDesign ID21.2 e ID20.5.1 Illustrator 2025 29.8.4 e superiori Illustrator 2026 30.1 e superiori InCopy 21.1 InCopy 20.5.1 Bridge 15.1.3 (LTS) Bridge 16.0.1 Substance 3D Modeler 1.22.4 Substance 3D Stager 3.1.6 Substance 3D Painter 11.1.2 Substance 3D Sampler 5.1.3 Coldfusion 2025 Update 6 Coldfusion 2023 Update 18 Substance 3D Designer 15.1.0 :: Riferimenti Adobe Security Bulletins e Advisories https://helpx.adobe.com/security.html https://helpx.adobe.com/security.html/security/security-bulletin.html https://helpx.adobe.com/security/products/dreamweaver/apsb26-01.html https://helpx.adobe.com/security/products/indesign/apsb26-02.html https://helpx.adobe.com/security/products/illustrator/apsb26-03.html https://helpx.adobe.com/security/products/incopy/apsb26-04.html https://helpx.adobe.com/security/products/bridge/apsb26-07.html https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-08.html https://helpx.adobe.com/security/products/substance3d_stager/apsb26-09.html https://helpx.adobe.com/security/products/substance3d_painter/apsb26-10.html https://helpx.adobe.com/security/products/substance3d-sampler/apsb26-11.html https://helpx.adobe.com/security/products/coldfusion/apsb26-12.html https://helpx.adobe.com/security/products/substance3d_designer/apsb26-13.html CSIRT Italia https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-11 Mitre CVE I riferimenti CVE sono disponibili nell'advisory originale. GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaWd+SAAKCRDBnEyTZRJg Qg7rAKDF58mf/s1JE1mhsPaqMXW04FPKcwCfbn43mqDP+npSClq1zF2TS04u0tc= =D1Pg -----END PGP SIGNATURE-----