Adobe Patches 29 Vulnerabilities

Adobe has issued patches for 29 vulnerabilities across InDesign, InCopy, Photoshop, Illustrator, Pass, Substance 3D Stager, and Format Plugins. Critical flaws that could allow arbitrary code execution were addressed in InDesign, InCopy, Photoshop, Illustrator, Substance 3D Stager, and Format Plugins, with a critical security bypass fixed in Pass.

Adobe says there is no evidence that the patched flaws have been exploited in the wild, and the company has assigned a priority rating of ‘3’ to all of the bugs, indicating that malicious exploitation is not expected. It was noted that a critical flaw in Adobe Commerce had been exploited to hack ecommerce sites, and CISA warned last month about active exploitation of an Adobe Experience Manager Forms vulnerability. Written by Eduard Kovacs, the update was published on 11 November 2025. According to CISA, these patches come amid ongoing warnings about exploited and high-severity flaws in related Adobe products.