Lucene search
K

691 matches found

Cvelist
Cvelist
added 2021/09/29 3:37 p.m.172 views

CVE-2021-39836 Adobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetIcon action that could result in arbitrary code execution in the context of the current user...

7.8CVSS7.9AI score0.68696EPSS
Exploits0References1
CVE
CVE
added 2021/09/29 3:37 p.m.97 views

CVE-2021-39836

CVE-2021-39836 affects Adobe Acrobat-related products: Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier, with a use-after-free in the AcroForm buttonGetIcon handling that could lead to arbitrary code execution in the context of the ...

7.8CVSS7.6AI score0.68696EPSS
Exploits0References1Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2021/09/16 12:0 a.m.36 views

Adobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.3AI score0.68696EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/09/16 12:0 a.m.46 views

Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.6AI score0.49525EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/09/16 12:0 a.m.40 views

Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.4AI score0.64297EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/09/16 12:0 a.m.54 views

Adobe Acrobat Reader DC AcroForm buttonGetCaption Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.1AI score0.64297EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/09/16 12:0 a.m.55 views

Adobe Acrobat Reader DC AcroForm getItemAt Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.5AI score0.64297EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/07/15 12:0 a.m.61 views

Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS2.8AI score0.03919EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.41 views

Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.6AI score0.05172EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/10 12:0 a.m.42 views

Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS2.6AI score0.04709EPSS
Exploits0References1
OSV
OSV
added 2020/10/02 8:15 a.m.2 views

CVE-2020-26534

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions, during AcroForm JavaScript execution...

9.8CVSS7.3AI score0.02294EPSS
Exploits0References1
NVD
NVD
added 2020/10/02 8:15 a.m.13 views

CVE-2020-26534

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions, during AcroForm JavaScript execution...

9.8CVSS0.02294EPSS
Exploits0References1
Prion
Prion
added 2020/10/02 8:15 a.m.18 views

Design/Logic Flaw

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions, during AcroForm JavaScript execution...

7.5CVSS9.4AI score0.02294EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2020/10/02 8:2 a.m.47 views

CVE-2020-26534

CVE-2020-26534 affects Foxit Reader and PhantomPDF (pre-10.1). The issue is a use-after-free in an Opt object related to Field::ClearItems and Field::DeleteOptions during AcroForm JavaScript execution. Connected sources describe a resource management/use-after-free vulnerability that could crash ...

9.8CVSS9.4AI score0.02294EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2020/10/02 8:2 a.m.18 views

CVE-2020-26534

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions, during AcroForm JavaScript execution...

9.6AI score0.02294EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/29 12:0 a.m.37 views

Foxit Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS2.2AI score0.08644EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/02/11 12:0 a.m.24 views

Foxit PhantomPDF AcroForm addWatermarkFromText Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.3AI score0.19382EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/02/11 12:0 a.m.35 views

Foxit Reader Annotations AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of form...

7.8CVSS4.9AI score0.05931EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/02/11 12:0 a.m.31 views

Foxit PhantomPDF AcroForm addWatermarkFromText Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS2.4AI score0.19009EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/15 12:0 a.m.28 views

Adobe Acrobat Reader DC AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.8AI score0.02641EPSS
Exploits0References1
Rows per page
Query Builder