SecPod

Learn Search

Search across all Learn content

← Back to Security Research
Adobe Security Hotfix for April 2016

Adobe Security Hotfix for April 2016

Adobe has released critical security updates for RoboHelp server 9, Creative Cloud desktop application, and Flash Player, which covers a total of 26 CVE’s. The Adobe security hotfix for RoboHelp Server 9 for Windows resolves a critical vulnerability. The security update for the Creative Cloud Deskto...

Apr 13, 2016By Kashinath T2 min read
Patch Tuesday Apr 2016
Patch Tuesday Apr 2016

Adobe has released critical security updates for RoboHelp server 9, Creative Cloud desktop application, and Flash Player, which covers a total of 26 CVE’s. The Adobe security hotfix for RoboHelp Server 9 for Windows resolves a critical vulnerability. The security update for the Creative Cloud Desktop Application for Windows and Macintosh resolves an important vulnerability. This security patch addresses the critical vulnerability in Adobe Flash Player on Windows, Macintosh, Linux and ChromeOS.

APSB16-12 (RoboHelp Server 9):
– A vulnerability in the handling of SQL queries that could lead to information disclosure
(CVE-2016-1035).

APSB16-11 (Creative Cloud Desktop Application):
– A vulnerability in the JavaScript API for Creative Cloud Libraries that could be abused to
remotely read and write files on the client’s file system (CVE-2016-1034).

APSB16-10 (Flash Player):
– Multiple type confusion vulnerabilities that could lead to code execution
(CVE-2016-1015, CVE-2016-1019).
– An use-after-free vulnerabilities that could lead to code execution
(CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, CVE-2016-1031).
– The memory corruption vulnerabilities that could lead to code execution
(CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023,CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028,CVE-2016-1029, CVE-2016-1032, CVE-2016-1033).
– A stack overflow vulnerability that could lead to code execution (CVE-2016-1018).
– A security bypass vulnerability (CVE-2016-1030).
– A vulnerability in the directory search path used to find resources that could lead to
code execution (CVE-2016-1014).

ProductsAffected versionsPlatforms
Creative Cloud Desktop Application Adobe Flash Player Adobe Flash Player RoboHelp Server3.5.1.209 or earlier 21.0.0.212 or earlier 11.2.202.615 or earlier 9.0.1Windows andMacintosh Windows and Macintosh Linux Windows

SecPod Saner detects these vulnerabilities and automatically fixes by applying security updates. Download Saner now and keep your systems updated and secure.

– Kashinath

Featured Posts

Open F5 Strengthens NGINX Security with Fixes for Critical Code Execution Flaws
vulnerability researchF5 Strengthens NGINX Security with Fixes for Critical Code Execution Flaws

CVE Research

F5 Strengthens NGINX Security with Fixes for Critical Code Execution Flaws

Oct 19, 2026

Open Silent Lynx Hits CIS Governments With WinRAR Flaw
threat intelligenceSilent Lynx Hits CIS Governments With WinRAR Flaw

CVE Research

Silent Lynx Hits CIS Governments With WinRAR Flaw

Silent Lynx (UAT-6275 / TAG-193) is a cyber-espionage actor targeting government organizations across the Commonwealth of Independent States. From June 2025 through August 2026, the group used four infection chains, including macro-enabled documents, PS2EXE downloaders, LNK-based PowerShell loaders, and WinRAR archives that exploit CVE-2025-8088, to deploy custom reverse shells such as FoalShell, Chvost, Laplas, and PickleShell. Activity spans nine countries and focuses on diplomacy, economic development, environmental management, water resources, and energy. This article summarizes the campaign’s delivery methods, infrastructure exposure, indicators of compromise, and practical mitigations for defenders.

Oct 16, 2026

Open Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution
Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution

CVE Research

Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution

A critical vulnerability in Drupal core's Field UI module could allow attackers to execute arbitrary code on vulnerable websites through exposed contributed modules or custom code. Tracked as CVE-2026-108097, the flaw stems from improper validation of PHP callbacks during table rendering. At least one known exploitation path does not require authentication, potentially putting affected websites at risk of server compromise.

Oct 16, 2026

Open Palo Alto PAN-OS Vulnerability CVE-2026-0322 Could Allow Root-Level Code Execution
vulnerability researchPalo Alto PAN-OS Vulnerability CVE-2026-0322 Could Allow Root-Level Code Execution

CVE Research

Palo Alto PAN-OS Vulnerability CVE-2026-0322 Could Allow Root-Level Code Execution

Oct 15, 2026