Alert GCSA-25086 - Adobe Monthly Security Update - luglio 2025

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256





******************************************************************

alert ID: GCSA-25086
data: 10 luglio 2025
titolo: Adobe Monthly Security Update - luglio 2025

******************************************************************

:: Descrizione del problema

Adobe ha rilasciato i seguenti aggiornamenti di sicurezza
con i quali risolve numerose vulnerabilita', di cui 35 con gravita'
e 3 con gravita' critica.

APSB25-49 : Security update available for Adobe After Effects
APSB25-54 : Security update available for Adobe Substance 3D Viewer
APSB25-56 : Security update available for Adobe Audition
APSB25-59 : Security update available for Adobe InCopy
APSB25-60 : Security update available for Adobe InDesign
APSB25-61 : Security update available for Adobe Connect
APSB25-63 : Security update available for Adobe Dimension
APSB25-64 : Security update available for Adobe Substance 3D Stager
APSB25-65 : Security update available for Adobe Illustrator
APSB25-66 : Security update available for Adobe FrameMaker
APSB25-67 : Security update available for Adobe AEM Forms
APSB25-68 : Security update available for Adobe AEM Screens
APSB25-69 : Security update available for Adobe ColdFusion

Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

Substance 3D Viewer, versione 0.22 e precedenti
InDesign, versione ID20.3 e precedenti (per Windows e macOS)
InDesign, versione ID19.5.3 e precedenti (per Windows e macOS)
Dimension, versione 4.1.2 e precedenti (per Windows e macOS)
Illustrator 2025, versione 29.5.1 e precedenti (per Windows e macOS)
Illustrator 2024, versione 28.7.6 e precedenti (per Windows e macOS)
FrameMaker 2020, Release Update 8 e precedenti (per Windows)
FrameMaker 2022, Release Update 6 e precedenti (per Windows)
ColdFusion 2025, Update 2 e precedenti
ColdFusion 2023, Update 14 e precedenti
ColdFusion 2021, Update 20 e precedenti
Experience Manager (AEM) Forms, versione 6.5.23.0 e precedenti
Connect, versione 24 e precedenti (per Windows)
InCopy, versione 20.3 e precedenti (per Windows e macOS)
InCopy, versione 19.5.3 e precedenti (per Windows e macOS)


:: Impatto

Esecuzione remota di codice arbitrario (RCE)
Rivelazione di informazioni (ID)
Acquisizione di privilegi piu' elevati (EoP)
Bypass delle funzionalita' di sicurezza (SFB)


:: Soluzioni

Aggiornare i prodotti alle versioni piu' recenti

Adobe Substance 3D Viewer 2.5
Adobe After Effects 24.6.7, 25.3
Adobe Audition 24.6.7, 25.3
Adobe InCopy 20.4, 19.5.4
Adobe InDesign ID20.4, ID19.5.4
Connect Windows App 25.1
Adobe Dimension 4.1.3
Adobe Substance 3D Stager 31.3
Illustrator 2025 29.6 e superiori
Illustrator 2024 28.7.8 e superiori
Adobe FrameMaker FrameMaker 2020 Update 9
Adobe FrameMaker FrameMaker 2022 Update 7
Adobe Experience Manager (AEM) Forms on JEE 6.5.0.0.20250527.0
Adobe Experience Manager (AEM) Screens AEM 6.5.22 Screens FP11.6
ColdFusion 2025 Update 3
ColdFusion 2023 Update 15
ColdFusion 2021 Update 21


:: Riferimenti

Adobe Security Bulletins e Advisories
https://helpx.adobe.com/security.html
https://helpx.adobe.com/security/products/substance3d-viewer/apsb25-54.html
https://helpx.adobe.com/security/products/after_effects/apsb25-49.html
https://helpx.adobe.com/security/products/audition/apsb25-56.html
https://helpx.adobe.com/security/products/incopy/apsb25-59.html
https://helpx.adobe.com/security/products/indesign/apsb25-60.html
https://helpx.adobe.com/security/products/connect/apsb25-61.html
https://helpx.adobe.com/security/products/dimension/apsb25-63.html
https://helpx.adobe.com/security/products/substance3d_stager/apsb25-64.html
https://helpx.adobe.com/security/products/illustrator/apsb25-65.html
https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
https://helpx.adobe.com/security/products/aem-forms/apsb25-67.html
https://helpx.adobe.com/security/products/aem-screens/apsb25-68.html
https://helpx.adobe.com/security/products/coldfusion/apsb25-69.html

CSIRT Italia
https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-5

CVEdetails.com
https://www.cvedetails.com/vulnerability-list.php?vendor_id=53&year=2025&month=06



GARR CERT Security Alert - subscribe/unsubscribe:
https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert




-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaG+yygAKCRDBnEyTZRJg
QvrtAJ9ysXQGj4teKc6tJPcuEtVsob7lGQCfc+i6KHM51UoP7r3mNrTTL2rBjE4=
=3MP3
-----END PGP SIGNATURE-----