Adobe Security Advisory (10th, December 2025)

Ref# ADV2025_422 | Date: Dec 12th 2025

Adobe published a security advisory highlighting vulnerabilities in the following product on December 10th, 2025. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

  • ColdFusion 2025 – version Update 4 and prior 
  • ColdFusion 2023 – version Update 16 and prior 
  • ColdFusion 2021 – version Update 22 and prior 
  • Adobe Experience Manager (AEM) – version AEM Cloud Service (CS) 
  • Adobe Experience Manager (AEM) – version 6.5 LTS, version 6.5.23 and prior 
  • Adobe DNG Software Development Kit (SDK) – version DNG SDK 1.7.0 and prior 
  • Acrobat DC – version 25.001.20982 and prior 
  • Acrobat Reader DC – version 25.001.20982 and prior 
  • Acrobat 2024 (Windows) – version 24.001.30264 and prior 
  • Acrobat 2024 (Mac) – version 24.001.30273 and prior 
  • Acrobat 2020 (Windows) – version 20.005.30793 and prior 
  • Acrobat 2020 (Mac) – version 20.005.30803 and prior 
  • Acrobat Reader 2020 (Windows) – version 20.005.30793 and prior 
  • Acrobat Reader 2020 (Mac) – version 20.005.30803 and prior 
  • Creative Cloud Desktop Application – version 6.4.0.361 and prior 

For more information on this update, you can follow this URL: 

https://www.cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av25-823 

The Guyana National CIRT recommends that users and administrators review this update and apply it where necessary. 

References