CVE-2021-21053

Adobe Illustrator version 25.1 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires use...

CVE-2021-21063

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary...

CVE-2021-21054

Adobe Illustrator version 25.1 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires use...

CVE-2021-21048

Adobe Photoshop versions 21.2.4 and earlier and 22.1.1 and earlier are affected by a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-21049

Adobe Photoshop versions 21.2.4 and earlier and 22.1.1 and earlier are affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-21053 Adobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution

Adobe Illustrator version 25.1 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires use...

PT-2021-3357 · 3Mf Consortium +2 · Lib3Mf +2

Name of the Vulnerable Software and Affected Versions: 3MF Consortium lib3mf version 2.0.0 Description: A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP functionality. This issue is related to the use of memory after it has been freed. Exploitation of this...

The vulnerability of the pdftotext program for converting PDF files allows a hacker to trigger a service failure.

The vulnerability of the PDF-to-text converter program pdftotext arises due to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted file...

The vulnerability of the Windows Media Center multimedia playback application stems from incorrect restrictions on XML links to external objects, which allows attackers to exploit this flaw to disclose protected information.

The vulnerability of the Windows Media Center multimedia playback application is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose protected information using a specially crafted .mcl file...

迈克菲 McAfee Endpoint Security 访问控制错误漏洞

McAfee Endpoint Security ENS is McAfee's antivirus product that provides comprehensive protection against network security threats. An improper access control vulnerability exists in McAfee Endpoint Security for Windows. An attacker could exploit the vulnerability to prevent the installation of...

DEBIAN-CVE-2021-21138

Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file...

DEBIAN-CVE-2021-21117

Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file...

Privilege escalation

Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file...

CVE-2021-21117

Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file...

UBUNTU-CVE-2021-21138

Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file...

UBUNTU-CVE-2021-21117

Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file...

CVE-2021-21138

Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file...

CVE-2021-21117

Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file...

The vulnerability of Adobe Illustrator’s graphic editor lies in its uncontrolled search path, which allows attackers to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to an uncontrolled element of the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of the Adobe Animate program for creating multimedia and computer animations lies in its uncontrolled search element, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially craft...