CVE-2021-46655

Bentley View 10.15.0.75 is affected by CVE-2021-46655. The flaw occurs in JT file parsing due to not validating the existence of an object before operations, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or ...

CVE-2021-46634

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46634

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46634 due to an out-of-bounds write in JT file parsing. The flaw can allow remote code execution in the context of the affected process; exploitation requires user interaction (visiting a malicious page or opening a malicious file). ...

CVE-2021-46625

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

CVE-2021-46625

Bentley View 10.15.0.75 is affected by CVE-2021-46625 (JT file parsing) due to a double-free/invalid-free condition in object handling that allows code execution. Exploitation requires user interaction (open a malicious file/page). Root cause: lack of validating object existence before freeing. M...

CVE-2021-46621

This CVE (CVE-2021-46621) affects Bentley MicroStation CONNECT 10.16.0.80 and is tied to parsing JT files. The root cause is a double-free/invalid object operation during JT file handling, leading to remote code execution when a user visits a malicious page or opens a crafted file. Exploitation r...

CVE-2021-46621

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46610

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46610

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46610. The vulnerability arises in the JT file parsing due to insufficient validation, causing a read past the end of an allocated buffer and enabling information disclosure. Exploitation requires user interaction (visiting a malicio...

CVE-2021-46600

Bentley MicroStation CONNECT 10.16.0.80 is affected. The vulnerability arises from improper validation in JT file parsing, leading to a read past the end of an allocated buffer (out-of-bounds read) and information disclosure. User interaction is required (visiting a malicious page or opening a ma...

CVE-2021-46600

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46598

Bentley MicroStation CONNECT 10.16.0.80 is affected by a memory corruption remote code execution vulnerability in the JT file parser. The flaw stems from insufficient validation of user-supplied data during JT file parsing, allowing an attacker to execute code with the current process context aft...

CVE-2021-46598

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46597

Bentley MicroStation CONNECT 10.16.0.80 is affected by a vulnerability in JT file parsing (use-after-free) that allows remote code execution. The flaw stems from not validating object existence before operations; exploitation requires user interaction (visiting a malicious page or opening a malic...

CVE-2021-46591

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46591

The CVE-2021-46591 entry covers Bentley MicroStation CONNECT 10.16.0.80. The vulnerability resides in the parsing of JT files, where crafted JT data can trigger a read past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires ...

CVE-2021-46590

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46590

CVE-2021-46590 (Bentley MicroStation CONNECT 10.16.0.80) : A vulnerability exists in the parsing of JT files where crafted data can trigger a read past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (target must open a malicious page or file...

CVE-2021-46588

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46588

CVE-2021-46588 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing flaw in JT files that leads to a use-after-free, enabling remote code execution. Exploitation requires user interaction (visit a malicious page or open a malicious file). Multiple connected sources (e.g., ZDI-2...