Adobe has released a set of new patches for the Creative Cloud Desktop application and RoboHelp Server 9 following last week's critical update of Adobe Flash Player.
The bug impacts Windows and Mac operating systems.
The security issue was disclosed by Roger Chen from the University of California, Berkeley, and Jung "Lokihardt" Hoon Lee working with Trend Micro's Zero Day Initiative.
In addition to the Adobe Creative Cloud update, the software maker also issued a security advisory and update for RoboHelp Server 9, an online help and assistance solution.
The security hotfix patches CVE-2016-1035, a critical vulnerability which could lead to information disclosure, according to Adobe. The security flaw lies within the handling of SQL queries.
Naturally, Adobe recommends that users patch their software as soon as possible. Users of Adobe Creative Cloud should update to version 220.127.116.11.
This month, Adobe also issued an emergency patch for a zero-day vulnerability in Adobe Flash. The bug, CVE-2016-1019, impacts Windows, Mac, Linux and Chrome operating systems, and is able to either crash PCs or grant attackers the chance to hijack sessions.
However, security researchers say Adobe Flash users which have not patched their systems against this threat do have some breathing space -- as cyberattackers leveraging the flaw in the Magnitude exploit kit messed up the integration of the vulnerability.
Read on: Top picks