Adobe released five security bulletins covering 23 separate vulnerabilities on Tuesday. Four of the five bulletins were rated critical, meaning that they could allow malicious code to run without the knowledge or consent of the user. The release prompted a rare rebuke from famed Google security researcher Tavis Ormandy, who alleged Adobe was downplaying the number of vulnerabilities addressed in one of the patches: APSB11-21. Adobe said that the company makes a policy of not disclosing details about internal findings.
Source: https://threatpost.com/google-researcher-says-adobe-downplays-security-holes-081011/75523/