Vulnerability In Chromium-based Microsoft Edge

There has been found a vulnerability in new Chromium-based Microsoft Edge web browser. The vulnerability is related to improper input validation in the Feedback extension. By exploiting this vulnerability an attacker may be able to write files to arbitrary locations and gain elevated privileges.

The vulnerability by itself does not allow arbitrary code to run. However, it could be used in conjunction with other vulnerabilities to take advantage of the elevated privileges when running.

Affected versions:
Microsoft Edge (Chromium-based) versions earlier than 83.0.478.37

More information available in the correspondent security advisory.

New PHP versions available

PHP development team has released 7.4.6, 7.3.18 and 7.2.31 versions of the PHP scripting language. Among other bugs some security bugs have been fixed. All PHP users are recommended to upgrade their versions to the latest release of the correspondent branch.

Changelogs:
Version 7.4.6
Version 7.3.18
Version 7.2.31

Adobe Premiere Rush Updated

Adobe have released an update to patch a vulnerability in their Adobe Premiere Rush application. The vulnerability (CVE-2020-9617) may lead to information disclosure.

Affected versions:
Adobe Premiere Rush 1.5.8 and earlier versions

More information in the related security bulletin.

Adobe Audition Patch Release

Adobe have released an update to patch a vulnerability in their Adobe Audition application. The vulnerability (CVE-2020-9618) may lead to information disclosure in vulnerable system.

Affected versions:
Adobe Audition 13.0.5 and earlier versions

More information in the related security bulletin.

Adobe Premiere Pro Fix Released

Adobe have released an update to patch a vulnerability in their Premiere Pro application. The vulnerability (CVE-2020-9616) may lead to information disclosure in vulnerable system.

Affected versions:
Adobe Premiere Pro 14.1 and earlier versions

More information in the related security bulletin.

Adobe Character Animator Updated

There has been released a new version of Adobe Character Animator. The new version fixes a buffer overflow vulnerability (CVE-2020-9586) that could lead to remote code execution.

Affected versions:
Character Animator 2020 3.2 and earlier versions

More information can be read from the Adobe security bulletin.

Google Chrome New Version Released

Google have released a version 83.0.4103.61 of their Chrome web browser. In addition to other changes 38 security vulnerabilities were fixed. More information about changes can be viewed in Google Chrome release blog.