Design/Logic Flaw

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...

CVE-2023-21591

Adobe InDesign version 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

CVE-2023-21592

Adobe InDesign version 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

CVE-2023-21591

Adobe InDesign version 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

Design/Logic Flaw

Adobe InDesign version 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

Design/Logic Flaw

Adobe InDesign version 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

CVE-2023-21598

CVE-2023-21598 – Adobe InCopy Use-After-Free : Connected sources corroborate a memory disclosure vulnerability in InCopy versions 18.0 and earlier, and 17.4 and earlier. The underlying issue is a Use-After-Free flaw that can bypass mitigations such as ASLR, with exploitation requiring user intera...

CVE-2023-21592 Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe InDesign version 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

CVE-2023-21591

Adobe InDesign is affected by a Font Parsing Out-Of-Bounds Read vulnerability (CVE-2023-21591) in which an out-of-bounds read could disclose memory and bypass ASLR. Affected versions: 18.0 and earlier, 17.4 and earlier. Exploitation requires user interaction (opening a crafted file). Remediation:...

CVE-2023-21598 Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...

CVE-2023-21592 Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe InDesign version 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

CVE-2023-21599 Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2023-21598 Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...

CVE-2023-21599

Adobe InCopy (versions 18.0 and earlier, and 17.4 and earlier) is affected by an out-of-bounds read vulnerability that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected products are addressed in Adobe APSB23-08, with remediation ...

CVE-2023-21592

Adobe InDesign (Windows/macOS) is affected by CVE-2023-21592, a font-parsing out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Affected versions include 18.0 and earlier, and 17.4 and earlier. Exploitation requires user interaction (opening a malicious file). The issue ...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in GNU C Library (CVE-2019-19126)

Summary Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in GNU C Library, caused by failing to ignore the LDPREFERMAP32BITEXEC environment variable during program execution. CVE-2019-19126. GNU C Library is used as...

Fedora 36 : mingw-expat (2022-d93b3bd8b9)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d93b3bd8b9 advisory. Update to 2.4.9, fixes CVE-2022-30674. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2022-44500 Adobe Illustrator Out-of-Bound Read Memory leak

Adobe Illustrator versions 26.5.1 and earlier, and 27.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2022-44498 Adobe Illustrator Out-of-Bound Read Memory leak

Adobe Illustrator versions 26.5.1 and earlier, and 27.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2022-44502 Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Illustrator versions 26.5.1 and earlier, and 27.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...