Adobe and Nvidia Patch Dozens of Vulnerabilities

Nvidia published four advisories covering 18 vulnerabilities in NemoClaw and OpenShell, including two critical flaws enabling code execution, privilege escalation, data tampering, information disclosure, and denial of service. Additional high-severity vulnerabilities affect Nvidia's DGX Spark AI computer and Unified Fabric Manager platform, with impacts including code execution and privilege escalation. Nvidia also addressed Rohammer attacks on GPUs and previously disclosed vulnerabilities in Triton Inference Server, Cumulus Linux, and NVOS. Adobe released seven advisories fixing critical code execution vulnerabilities in Substance 3D Designer, Sampler, Painter, XD, and Campaign Classic, plus denial of service and information exposure flaws in Illustrator and Content Credentials SDK. Adobe states no exploitation in the wild has been observed, with only the Campaign Classic vulnerability rated as a priority 1 risk. The advisories collectively address dozens of vulnerabilities with critical and high severity ratings.

The vulnerabilities patched by Nvidia and Adobe include critical issues that could allow attackers to execute arbitrary code, escalate privileges, tamper with data, disclose sensitive information, or cause denial of service. These impacts affect enterprise AI security products, AI computing platforms, GPU hardware, and widely used creative software. Although no active exploitation has been reported, the presence of critical code execution and privilege escalation flaws indicates a significant risk if exploited. Adobe specifically highlights the Campaign Classic vulnerability as having a higher risk of exploitation.

Both Nvidia and Adobe have released official patches addressing these vulnerabilities. Users and administrators should apply the latest updates from Nvidia for NemoClaw, OpenShell, DGX Spark AI computer, Unified Fabric Manager, Triton Inference Server, Cumulus Linux, and NVOS products. Adobe customers should update Substance 3D Designer, Sampler, Painter, XD, Campaign Classic, Illustrator, and Content Credentials SDK to the patched versions. Since Adobe reports no exploitation in the wild and rates only one vulnerability as high priority, applying these patches promptly will mitigate the risk. No additional vendor advisories indicate alternative mitigations or that no action is required.