SecPod

Learn Search

Search across all Learn content

← Back to Security Research
Adobe Security Updates – March 2018

Adobe Security Updates – March 2018

Mar 15, 2018By Rajat Mishra1 min read

Tech giant Adobe released security updates march 2018 patching up critical and important security holes in its Dreamweaver CC, Adobe Connect, and Flash Player products. A patch management tool made this possible. Dreamweaver CC used for website creation, Connect used for web meetings and Flash Player used for executing and displaying content from a Small Web Format (SWF) file. Also, Five vulnerabilities were patched up in which three are identified as critical.

The tally contains vulnerabilities as critical as Arbitrary Code Execution and Remote Code Execution, which if exploited successfully could allow for arbitrary code execution in the context of the privileges allotted to the current user. Also, Other important vulnerabilities enlisted are Arbitrary file deletion and Information disclosure. Which can lead to unintended arbitrary local file removal or forced uninstall of an application. Moreover, Using cross-site scripting via an unrestricted SWF file upload vulnerability. However, A vulnerability management solution can manage these attacks.

Affected Products in security updates March 2018 :

Vulnerability Details given in Adobe Security Updates March 2018:

Affected Versions & Solutions:

SecPod Saner detects these vulnerabilities and automatically fixes them by applying security updates.

Featured Posts

Open Silent Lynx Hits CIS Governments With WinRAR Flaw
threat intelligenceSilent Lynx Hits CIS Governments With WinRAR Flaw

CVE Research

Silent Lynx Hits CIS Governments With WinRAR Flaw

Silent Lynx (UAT-6275 / TAG-193) is a cyber-espionage actor targeting government organizations across the Commonwealth of Independent States. From June 2025 through August 2026, the group used four infection chains, including macro-enabled documents, PS2EXE downloaders, LNK-based PowerShell loaders, and WinRAR archives that exploit CVE-2025-8088, to deploy custom reverse shells such as FoalShell, Chvost, Laplas, and PickleShell. Activity spans nine countries and focuses on diplomacy, economic development, environmental management, water resources, and energy. This article summarizes the campaign’s delivery methods, infrastructure exposure, indicators of compromise, and practical mitigations for defenders.

Oct 16, 2026

Open Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution
Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution

CVE Research

Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution

A critical vulnerability in Drupal core's Field UI module could allow attackers to execute arbitrary code on vulnerable websites through exposed contributed modules or custom code. Tracked as CVE-2026-108097, the flaw stems from improper validation of PHP callbacks during table rendering. At least one known exploitation path does not require authentication, potentially putting affected websites at risk of server compromise.

Oct 16, 2026

Open Palo Alto PAN-OS Vulnerability CVE-2026-0322 Could Allow Root-Level Code Execution
vulnerability researchPalo Alto PAN-OS Vulnerability CVE-2026-0322 Could Allow Root-Level Code Execution

CVE Research

Palo Alto PAN-OS Vulnerability CVE-2026-0322 Could Allow Root-Level Code Execution

Oct 15, 2026

Open Cisco Secure Email Gateway Under Attack: Critical CVE-2026-76519 Enables Arbitrary File Write
vulnerability researchCisco Secure Email Gateway Under Attack: Critical CVE-2026-76519 Enables Arbitrary File Write

CVE Research

Cisco Secure Email Gateway Under Attack: Critical CVE-2026-76519 Enables Arbitrary File Write

Oct 15, 2026