Adobe Animate Incorrect Authorization Vulnerability Allowing Arbitrary Code Execution

A vulnerability in Adobe Animate related to incorrect authorization has been identified, which could allow arbitrary code execution in the context of the current user. This issue affects Adobe Animate 2023 versions through 23.0.15 and Adobe Animate 2024 versions through 24.0.13, on both Windows and macOS. The exploitation of this vulnerability does not require user interaction, but depends on conditions beyond the attacker's control.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users are advised to update to Adobe Animate 2023 version 23.0.16 or Adobe Animate 2024 version 24.0.14. For managed environments, IT administrators can use the Adobe Admin Console to deploy these updates.