Cross site scripting

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Input validation

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-22233 Adobe After Effects Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction...

CVE-2023-22238 Adobe After Effects Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-22237 Adobe After Effects Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-22238 Adobe After Effects Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-22239 Adobe After Effects Improper Input Validation Remote Code Execution Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-22239 Adobe After Effects Improper Input Validation Remote Code Execution Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-22233 Adobe After Effects Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction...

Adobe After Effects Input Validation Error Vulnerability

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe. Adobe After Effects is vulnerable to an input validation error, which could be exploited to execute arbitrary code in the context of the current user...

CVE-2023-22233

Adobe After Effects is affected by CVE-2023-22233, an out-of-bounds read vulnerability impacting After Effects versions 23.1 and earlier, and 22.6.3 and earlier. The issue could disclose sensitive memory and bypass ASLR; exploitation requires the victim to open a malicious file. Public citations ...

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2023-17024)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. Adobe After Effects suffers from an out-of-bounds read vulnerability that...

CVE-2023-22237 Adobe After Effects Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe After Effects Out-of-Bounds Writing Vulnerability (CNVD-2023-13731)

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe. Adobe After Effects is vulnerable to an out-of-bounds write vulnerability that could be exploited by attackers to execute arbitrary code in the current user context...

The February 2023 Patch Tuesday Security Update Review

Microsoft and Adobe have released several monthly security fixes and updates for their products. Let’s take a look at the highlights of this month’s Patch Tuesday as we review and discuss the security updates. Microsoft Patches for February 2023 Microsoft has patched 79 vulnerabilities this month...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. Adobe After Effects suffers from an out-of-bounds read vulnerability that...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe. Adobe After Effects is vulnerable to an out-of-bounds write vulnerability that could be exploited by attackers to execute arbitrary code in the current user context...

Adobe After Effects 输入验证错误漏洞

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe. Adobe After Effects is vulnerable to an input validation error, which could be exploited to execute arbitrary code in the context of the current user...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe, which is vulnerable to an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...

APSB23-02 : Security update available for Adobe After Effects

Adobe has released an update for Adobe After Effects for Windows and macOS. This update addresses critical and important security vulnerabilities. Successful exploitation could lead to arbitrary code execution and memory leak in the context of the current user...