CVE-2021-46581

CVE-2021-46581 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability arises from parsing JT files, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution in the current process. Exploitation requires user interaction (visiting a mal...

CVE-2021-46580

CVE-2021-46580 affects Bentley MicroStation CONNECT. The issue is a JT file parsing use-after-free caused by not validating an object’s existence before operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...

CVE-2021-46579

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46578

Bentley MicroStation CONNECT JT file parsing vulnerability (CVE-2021-46578) is a use-after-free flaw that allows remote code execution. The issue arises in parsing JT files and stems from not validating the existence of an object before performing operations on it. Exploitation requires user inte...

CVE-2021-46578

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46577

Summary (supported): CVE-2021-46577 affects Bentley MicroStation CONNECT 10.16.0.80. The issue lies in the JT file parsing where the length of user-supplied data is not properly validated before being copied into a heap-based buffer, enabling a heap-based overflow. Impact: remote code execution i...

CVE-2021-46577

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46576

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46575

CVE-2021-46575 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing-use-after-free flaw in DGN file handling where the code does not validate object existence before operations, enabling remote code execution in the process context. Exploitation requires user interaction (visit...

CVE-2021-46573

Bentley MicroStation CONNECT JT file parsing contains a use-after-free vulnerability that allows remote code execution. Affected versions include MicroStation CONNECT 10.16.0.80. Exploitation requires user interaction (visiting a malicious page or opening a malicious JT file). The issue arises fr...

CVE-2021-46571

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-46571

CVE-2021-46571 affects Bentley View 10.16.0.80. The vulnerability arises in the JT file parsing code, due to not validating the existence of an object before performing operations, enabling remote code execution in the attacker’s context. Exploitation requires user interaction (visiting a malicio...

CVE-2021-46570

CVE-2021-46570 affects Bentley View 10.16.0.80. The issue lies in parsing JT files where memory is accessed without prior proper initialization, enabling an attacker to disclose sensitive information and, with other vulnerabilities, execute arbitrary code in the current process after user interac...

CVE-2021-46569

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46568

This CVE affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability lies in the JT file parser, where crafted JT data can trigger a write past the end of an allocated buffer, allowing remote code execution in the context of the current process. Exploitation requires user interaction (the ...

CVE-2021-46567

CVE-2021-46567 concerns Bentley MicroStation CONNECT JT file parsing. The vulnerability arises from failing to validate object existence before operating on it, enabling a remote attacker to execute arbitrary code in the context of the affected process. User interaction is required (target must v...

CVE-2021-46566

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46566 due to a JT file parsing flaw. The vulnerability stems from uninitialized memory being accessed during parsing, enabling remote code execution when a user opens a malicious file or visits a malicious page. The issue allows code...

CVE-2021-46566

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46565

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46565

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46565, a vulnerability in parsing JT files where improper validation of user-supplied data length leads to a stack-based buffer overflow. This allows remote code execution in the context of the current process and requires user inter...