Adobe Photoshop, a high-quality photo editing app, is used by people across the world. Due to its massive popularity, the vulnerabilities of the software are targeted by attackers to compromise systems. In the latest move, the Indian Computer Emergency Response Team, the national nodal agency for "computer security incidents," warned users of multiple vulnerabilities in Adobe products.
According to the vulnerability note shared on Monday, the severity rating of the warning falls in the "critical" category. The affected packages of Photoshop include: "Adobe Photoshop 2022 23.5.5 and later and Photoshop 2023 24.7 earlier versions."
These vulnerabilities could have been "exploited by a remote attacker to cause memory leaks, bypass security restrictions, execute arbitrary code, escalate privileges and cause denial of service (DoS) condition on the targeted system."
Adobe Photoshop 2023 Update: Adobe has already released a fix for the issue. (Image:Unsplash)
The flaws existed due to "use after free, out-of-bounds read, improper input validation, cross-site scripting, improper authorisation, SQL injection, information exposure, uncontrolled resource consumption, server-side request forgery and access of uninitialised pointer issues." In simple terms, if exploited, these shortcomings could have allowed an attacker to sneak into the software's data and compromise the security of a computer.
Adobe has already released a fix for the issue. CERT-In recommends that users update their software to the latest available package. Here's how you can update your Photoshop to the latest version.
Also Read: DragGAN: This Photoshop-Like Tool Has Got The World Excited | Details Inside
Step 1: Head to the Creative Cloud app
Step 2: Click on the 'Account' icon and head to 'Preferences'
Step 3: Now head to the 'Apps' section on the left side
Step 4: Click 'Auto-update' and configure the toggle for the required apps
Step 5: Click on 'Done'
You can also manually update Photoshop from the 'Updates' tab.
On a related note, functioning under the Ministry of Electronics and Information Technology, the agency regularly raises awareness around tech-related scams in India. In a recent move, the company shared tips on how people can stay safe from online shopping frauds and Quick Response (QR) code scams.