Adobe patches 140 vulnerabilities and announces ColdFusion end of life

Adobe has released security advisories addressing approximately 140 vulnerabilities across 10 different products. The patches target several high-severity issues, including flaws that could allow for arbitrary code execution, privilege escalation, and denial-of-service conditions.

Key affected products include Adobe ColdFusion, which has 32 vulnerabilities, and the Content Credentials SDK, which has 30. Other patched software includes Photoshop, Substance 3D Stager, Adobe Commerce, FrameMaker, Dimension, Substance 3D Sampler, Substance 3D Designer, and Bridge. Adobe noted that while it has used frontier AI models to identify these flaws, it is not currently aware of any in-the-wild exploitation.

Separately, Adobe has announced the end of extended support for Adobe ColdFusion 2021, effective November 10, 2026. After this date, the web application development platform will no longer receive updates or support.