Adobe has reported multiple vulnerabilities in various products, including Animate, Commerce, Framemaker, Dimension, InCopy, InDesign Desktop, and Substance3D - Stager. These vulnerabilities could result in arbitrary code execution, privilege escalation, cross-site scripting, and other security issues. The vulnerabilities were published on October 9 and 10, 2024, and have a CVSS score ranging from 7.6 to 9.8. The vulnerabilities in Animate include stack-based buffer overflow, access of uninitialized pointer, use after free, integer overflow or wraparound, and heap-based buffer overflow. The vulnerabilities in Commerce include improper authentication, cross-site scripting, and improper input validation. Framemaker is affected by out-of-bounds read, untrusted search path, unrestricted upload of file with dangerous type, integer overflow or wraparound, and integer underflow vulnerabilities. Dimension is affected by use after free and out-of-bounds write vulnerabilities. InCopy and InDesign Desktop are affected by unrestricted upload of file with dangerous type vulnerabilities. Substance3D - Stager is affected by use after free, heap-based buffer overflow, out-of-bounds write, and write-what-where condition vulnerabilities. Users are advised to update their software to the latest version to patch these vulnerabilities. Additionally, a WordPress plugin called WP Post Author is vulnerable to time-based SQL injection, and users are advised to update the plugin to the latest version.