SecPod

Learn Search

Search across all Learn content

← Back to Security Research
Adobe Security Hotfix for April 2016

Adobe Security Hotfix for April 2016

Adobe has released critical security updates for RoboHelp server 9, Creative Cloud desktop application, and Flash Player, which covers a total of 26 CVE’s. The Adobe security hotfix for RoboHelp Server 9 for Windows resolves a critical vulnerability. The security update for the Creative Cloud Deskto...

Apr 13, 2016By Kashinath T2 min read
Patch Tuesday Apr 2016
Patch Tuesday Apr 2016

Adobe has released critical security updates for RoboHelp server 9Creative Cloud desktop application, and Flash Player, which covers a total of 26 CVE’s. The Adobe security hotfix for RoboHelp Server 9 for Windows resolves a critical vulnerability. The security update for the Creative Cloud Desktop Application for Windows and Macintosh resolves an important vulnerability. This security patch addresses the critical vulnerability in Adobe Flash Player on Windows, Macintosh, Linux and ChromeOS.

APSB16-12 (RoboHelp Server 9):
– A vulnerability in the handling of SQL queries that could lead to information disclosure
(CVE-2016-1035).

APSB16-11 (Creative Cloud Desktop Application):
– A vulnerability in the JavaScript API for Creative Cloud Libraries that could be abused to
remotely read and write files on the client’s file system (CVE-2016-1034).

APSB16-10 (Flash Player):
– Multiple type confusion vulnerabilities that could lead to code execution
(CVE-2016-1015, CVE-2016-1019).
– An use-after-free vulnerabilities that could lead to code execution
(CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, CVE-2016-1031).
– The memory corruption vulnerabilities that could lead to code execution
(CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023,CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028,CVE-2016-1029, CVE-2016-1032, CVE-2016-1033).
– A stack overflow vulnerability that could lead to code execution (CVE-2016-1018).
– A security bypass vulnerability (CVE-2016-1030).
– A vulnerability in the directory search path used to find resources that could lead to
code execution (CVE-2016-1014).

SecPod Saner detects these vulnerabilities and automatically fixes by applying security updates. Download Saner now and keep your systems updated and secure.

– Kashinath

Featured Posts

Open Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras
Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras

CVE Research

Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras

A single operator compromised 14,530+ Dahua cameras across Ukraine and Russia in 35 days, chaining credential brute-force, a CVE-2021-33044/33045 authentication bypass, and P2P relay abuse to plant a persistent backdoor and harvest transferable admin access.

Aug 21, 2026

Open Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF
Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF

CVE Research

Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF

CVE-2026-19478 is a critical code injection vulnerability in GitLab CE/EE that allows an unauthenticated attacker to modify or delete public projects and user data by abusing a GraphQL directive. A second high-severity issue, CVE-2026-19650, involves cross-site request forgery in the GraphQL multiplex query handler. This article examines how the critical vulnerability works, the availability of a public proof-of-concept, the potential impact on self-managed instances, the affected versions, and the security updates released to remediate both issues.

Aug 19, 2026

Open No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners
No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners

CVE Research

No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners

Aug 19, 2026

Open Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies
Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies

CVE Research

Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies

Aug 19, 2026

Adobe Security Hotfix for April 2016 | SecPod