Adobe Patched 140 Vulnerabilities in 10 Products
The company has transitioned to a twice-monthly security update cadence to manage the rising volume of flaw disclosures.
Updated on Oct. 13, 2026 in Cybersecurity
Live Poll
Do you trust AI-assisted security updates to protect your computer as much as human-verified patches?
Adobe released security updates addressing 140 vulnerabilities across 10 products, including ColdFusion, Photoshop, and Adobe Commerce. The company reports that none of these flaws have been exploited in the wild.
Why it matters
The high volume of vulnerability discoveries has prompted Adobe to adopt a more frequent, twice-monthly security bulletin schedule to expedite patching. This shift aims to manage the increasing complexity of securing its diverse software suite.
Most of the 10 released advisories carry a priority rating of 3, while Adobe Commerce is designated as priority 2. These updates follow the company's internal implementation of frontier AI models to identify code flaws prior to final engineer validation.
The players
Adobe
A global software company known for its creative cloud, document, and e-commerce platforms.
The details
Adobe utilizes frontier AI models—advanced machine learning systems trained on massive datasets—to scan its codebase for potential vulnerabilities. Before any code is deployed, human engineers review, validate, and approve the modifications suggested by these AI tools. This process aims to increase the efficiency of identifying structural weaknesses in software before they are discovered by external researchers.
Timeline
Security bulletins are now released on the second and fourth Tuesday of each month.
The Tech Race
Adobe’s transition to a twice-monthly cadence mirrors the industry-standard patching cycles employed by major platforms like Microsoft. This shift highlights a broader trend where software providers move toward consistent, predictable schedules to address the growing volume of vulnerability disclosures.
Users of ColdFusion, Adobe Commerce, and Photoshop should update their software to the latest versions to address the resolved vulnerabilities. These patches are now available globally and represent the new standard for the company's increased release frequency.
The takeaway
Adobe's shift to a more frequent, bi-monthly release schedule suggests a recognition that the current volume of vulnerability disclosures requires faster, more predictable response times. Security administrators should mark their calendars for the second and fourth Tuesday of every month.
Further reading
For broader trends in vulnerability management and patch frequency, see our latest coverage in Cybersecurity.
Source note: This article includes information reported by SecurityWeek.
Live Poll
Do you trust AI-assisted security updates to protect your computer as much as human-verified patches?
