Breaking News

Govt Raises Security Warning Over Vulnerabilities in Adobe Software

by VARINDIA 2025-07-03

For more info and updates, users can visit the Cyber Swachhta Kendra or Adobe’s official support site.

India’s top cybersecurity agency, the Indian Computer Emergency Response Team (CERT-In), has issued an important warning about serious security flaws found in many Adobe software products. The alert, numbered CIVN-2025-0137 and released on July 1, has been classified with a "medium severity" rating, meaning users and IT teams should act quickly but not panic.

These vulnerabilities could allow hackers to take harmful actions, such as breaking through security layers, stealing data, running malicious code, launching denial-of-service (DoS) attacks, and even gaining full control of systems. This could be especially dangerous for companies using Adobe tools for content creation, e-commerce, or document management.

Which Adobe Products Are Affected?

CERT-In has flagged several Adobe products, including:

Adobe InCopy (versions up to 20.3 and 19.5.4)
Adobe Experience Manager (AEM versions up to 6.5.23)
Adobe Commerce & Magento Open Source (before version 2.4.8)
Adobe InDesign (up to ID20.3)
Adobe Acrobat and Reader (on Windows and Mac prior to specific builds)
Adobe Substance 3D Sampler and Painter (earlier versions)

These tools are widely used by designers, publishers, online retailers, and professionals in creative industries, making the issue even more urgent.

What Causes the Risk?

The bugs are due to problems like memory corruption, poor input validation, and insecure data handling. These weaknesses give hackers ways to attack systems, especially in corporate settings where these apps are used frequently.

CERT-In recommends: