Adobe recently implemented a security patch that mitigates ninety-two (92) vulnerabilities, with sixty-six (66) of them being rated as critical. Most of the critical vulnerabilities are remote code execution (RCE) vulnerabilities that could allow unauthenticated attackers to execute arbitrary code within systems by-remote. Some of the other critical flaws are privilege escalation vulnerabilities, denial-of-service vulnerabilities, out-of-bounds (OOB) write vulnerabilities, and memory leaks. The majority of the flaws were identified by researchers from TopSec Alpha Team and Trend Micro’s Zero-Day Initiative (ZDI). A spokesperson from Adobe states that this patch was planned, and not the result of an emergency, and there is still no evidence that any of these vulnerabilities have been exploited in-the-wild. Details on the individual vulnerabilities can be found in the Adobe advisory linked below. Ankura CTAPT investigators will continue to monitor possible flaws regarding Adobe products and produce new reports as new matters develop.