Lucene search
+L

7 matches found

Malwarebytes
Malwarebytes
•added 2026/07/23 11:24 a.m.•25 views

WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw

HermeticReader is the name given to a recently disclosed vulnerability in the Adobe Acrobat PDF extension for Chrome, tracked as CVE-2026-48294. Researchers discovered the issue in early June 2026 and reported it to Adobe, which patched the flaw over a single weekend. They found that a single vis...

7.4CVSS5.7AI score0.01215EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2026/07/22 3:01 p.m.•22 views

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data. The shortcoming has been codenamed HermeticReader by Guardi...

7.4CVSS5.4AI score0.01215EPSS
SaveExploits0
CVE
CVE
•added 2026/06/16 8:12 p.m.•148 views

CVE-2026-48294

CVE-2026-48294 (CVSS 7.4 HIGH) is a UXSS-class cross-origin data disclosure vulnerability in the Adobe Acrobat PDF Extension for Chrome (ID: efaidnbmnnnibpcajpcglclefindmkaj), affecting versions 26.5.2.2 and earlier (~314 million users). Codenamed HermeticReader by Guardio Labs, the flaw exploits...

7.4CVSS5.3AI score0.01215EPSS
SaveIn wildExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/06/16 8:12 p.m.•44 views

CVE-2026-48294

Adobe Acrobat PDF Extension Chrome versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerability to gain access to data regarding the victim's session. Exploitation of this issue requires user interaction in tha...

7.4CVSS0.01215EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•52 views

PT-2026-50077

Name of the Vulnerable Software and Affected Versions Adobe Acrobat PDF Extension Chrome versions prior to 26.5.2.3 Description A UXSS-class cross-origin data disclosure issue exists where an attacker can gain access to the victim's session data. UXSS Universal Cross-Site Scripting is a type of...

7.8CVSS5.8AI score0.01215EPSS
SaveExploits0References23
BDU FSTEC
BDU FSTEC
•added 2024/09/13 12:00 a.m.•18 views

Vulnerability of the Adobe Acrobat browser extension developed by Microsoft Edge, allowing a hacker to execute arbitrary code

The vulnerability of the Adobe Acrobat browser extension for Microsoft Edge relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious PDF file...

7.8CVSS6.4AI score0.00483EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
•added 2017/01/25 12:00 a.m.•14 views

Adobe Acrobat Extension for Chrome Cross-Site Scripting Vulnerability

Adobe Acrobat are the United States of America Odo than Adobe company's a PDF file editing and conversion tools.Adobe Acrobat Extension for Chrome is used for Chrome extension. Acrobat Extension for Chrome version 15.1.0.3 there is a cross-site scripting vulnerability, the vulnerability stems fro...

6.1CVSS6.8AI score0.04043EPSS
SaveExploits0References1
Rows per page
Query Builder