SecPod

Learn Search

Search across all Learn content

← Back to Security Research
Adobe Security Hotfix for April 2016

Adobe Security Hotfix for April 2016

Adobe has released critical security updates for RoboHelp server 9, Creative Cloud desktop application, and Flash Player, which covers a total of 26 CVE’s. The Adobe security hotfix for RoboHelp Server 9 for Windows resolves a critical vulnerability. The security update for the Creative Cloud Deskto...

Apr 13, 2016By Kashinath T2 min read
Patch Tuesday Apr 2016
Patch Tuesday Apr 2016

Adobe has released critical security updates for RoboHelp server 9Creative Cloud desktop application, and Flash Player, which covers a total of 26 CVE’s. The Adobe security hotfix for RoboHelp Server 9 for Windows resolves a critical vulnerability. The security update for the Creative Cloud Desktop Application for Windows and Macintosh resolves an important vulnerability. This security patch addresses the critical vulnerability in Adobe Flash Player on Windows, Macintosh, Linux and ChromeOS.

APSB16-12 (RoboHelp Server 9):
– A vulnerability in the handling of SQL queries that could lead to information disclosure
(CVE-2016-1035).

APSB16-11 (Creative Cloud Desktop Application):
– A vulnerability in the JavaScript API for Creative Cloud Libraries that could be abused to
remotely read and write files on the client’s file system (CVE-2016-1034).

APSB16-10 (Flash Player):
– Multiple type confusion vulnerabilities that could lead to code execution
(CVE-2016-1015, CVE-2016-1019).
– An use-after-free vulnerabilities that could lead to code execution
(CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, CVE-2016-1031).
– The memory corruption vulnerabilities that could lead to code execution
(CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023,CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028,CVE-2016-1029, CVE-2016-1032, CVE-2016-1033).
– A stack overflow vulnerability that could lead to code execution (CVE-2016-1018).
– A security bypass vulnerability (CVE-2016-1030).
– A vulnerability in the directory search path used to find resources that could lead to
code execution (CVE-2016-1014).

SecPod Saner detects these vulnerabilities and automatically fixes by applying security updates. Download Saner now and keep your systems updated and secure.

– Kashinath

Featured Posts

Open One Request, Total Persistence: Inside the SharePoint Flaw Attackers Are Exploiting
One Request, Total Persistence: Inside the SharePoint Flaw Attackers Are Exploiting

CVE Research

One Request, Total Persistence: Inside the SharePoint Flaw Attackers Are Exploiting

A critical SharePoint deserialization flaw, CVE-2026-50522 (CVSS 9.8), is under active exploitation just weeks after its July 2026 patch, following a public PoC. Attackers are using it to steal IIS machine keys in a single request, gaining persistence that survives patching alone. Now on CISA's KEV list, it's the third actively exploited SharePoint flaw in recent months, patch immediately and rotate machine keys.

Jul 24, 2026

Open ENCFORGE Ransomware: Anatomy of an AI-Focused Cyber Attack
ENCFORGE Ransomware: Anatomy of an AI-Focused Cyber Attack

CVE Research

ENCFORGE Ransomware: Anatomy of an AI-Focused Cyber Attack

Jul 22, 2026

Open UTA0533 Weaponizes KNUCKLEBALL: Inside the SonicWall SMA Zero-Day Exploitation Chain
UTA0533 Weaponizes KNUCKLEBALL: Inside the SonicWall SMA Zero-Day Exploitation Chain

CVE Research

UTA0533 Weaponizes KNUCKLEBALL: Inside the SonicWall SMA Zero-Day Exploitation Chain

Jul 20, 2026

Open One Email, Full Session Takeover: Inside Zimbra's Critical Classic Web Client Code Execution Flaw
One Email, Full Session Takeover: Inside Zimbra's Critical Classic Web Client Code Execution Flaw

CVE Research

One Email, Full Session Takeover: Inside Zimbra's Critical Classic Web Client Code Execution Flaw

Jul 20, 2026