PT-2023-7376

Name of the Vulnerable Software and Affected Versions Adobe Audition versions 23.6.1 and earlier Adobe Audition versions 24.0 and earlier Description The issue is related to an Access of Uninitialized Pointer vulnerability. This could allow an attacker to gain unauthorized access to protected...

PT-2023-7147

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 23.006.20360 and earlier Adobe Acrobat Reader versions 20.005.30524 and earlier Description The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

Proof of concept for CVE-2023-4911 Looney Tunables This vu...

Adobe Dimension < 3.4.7 Multiple Memory leak (APSB23-10) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.7. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-10 advisory. - Adobe Dimension version 3.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to...

Adobe Bridge Out-of-Bounds Read Vulnerability (CNVD-2023-76928)

Adobe Bridge is a powerful creative resource manager that lets users quickly and easily preview, organize, edit, and publish multiple creative resources, edit metadata, and add keywords, tags, and ratings to material resources.Adobe Bridge uses collections to organize assets and find assets using...

Adobe Bridge Resource Management Error Vulnerability (CNVD-2023-76925)

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a Resource Management Error vulnerability that stems from the presence of uncontrolled resource consumption by the application, which can be exploited by an attacker to bypass mitigations such as ASLR...

An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit

By Ian Beer A graph representation of the sandbox escape NSExpression payload In April this year Google's Threat Analysis Group, in collaboration with Amnesty International, discovered an in-the-wild iPhone zero-day exploit chain being used in targeted attacks delivered via malicious link. The...

CVE-2023-38216

Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction ...

CVE-2023-38217

Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

Design/Logic Flaw

Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

Design/Logic Flaw

Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction ...

CVE-2023-38217 ZDI-CAN-21403: Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-38217

Affected software : Adobe Bridge versions 12.0.4 and earlier, and 13.0.3 and earlier. Vulnerability : Out-of-bounds Read due to missing data boundary checks, leading to potential disclosure of sensitive memory and possible bypass of ASLR. Impact : memory disclosure; exploitation requires user int...

CVE-2023-38216 ZDI-CAN-21404: Adobe Bridge Font Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction ...

CVE-2023-38216

Adobe Bridge is affected by CVE-2023-38216: Use After Free in versions 12.0.4 and earlier, and 13.0.3 and earlier, enabling potential disclosure of sensitive memory and bypassing ASLR. Exploitation requires user interaction (victim must open a malicious file). Affected platforms include Windows/m...

CVE-2023-38217: Out-of-bounds Read

Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-38216: Use After Free

Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction ...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

CVE-2023-4911 https://www.qualys.com/2023/10/03/cve-2023-4911...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

CVE-2023-4911 https://www.qualys.com/2023/10/03/cve-2023-4911...

Amazon Linux 2 : microvm-kernel (ALASMICROVM-KERNEL-4.14-2023-002)

The version of microvm-kernel installed on the remote host is prior to 4.14.246-199.474. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MICROVM-KERNEL-4.14-2023-002 advisory. A flaw was found in the Linux kernel's implementation of wireless drivers using the...