Lucene search
HistoryMay 16, 2024 - 9:15 a.m.
CVE-2024-20792
illustrator
use after free
vulnerability
arbitrary code execution
user interaction
malicious file
cve-2024-20792
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
21.5%
Illustrator versions 28.4, 27.9.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Related
vulnrichment
vulnrichment
cvelist
cvelist
cve
cve
CVE-2024-20792
2024-05-16 09:15:09
openvas
openvas
Adobe Illustrator Multiple Vulnerabilities (APSB24-30) - Mac OS X
2024-05-16 00:00:00
Adobe Illustrator Multiple Vulnerabilities (APSB24-30) - Windows
2024-05-16 00:00:00
nessus
nessus
adobe
adobe
APSB24-30 : Security update available for Adobe Illustrator
2024-05-14 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
21.5%
Related for NVD:CVE-2024-20792