CVE-2025-54257

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-54257

CVE-2025-54257 affects Adobe Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier. Root cause: Use After Free vulnerability in a component handling opened files. Impact: arbitrary code execution in the context of the current user (high). Attack requires user interaction: t...

CVE-2025-54257 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-54242

Premiere Pro versions 25.3, 24.6.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file, and scope is unchanged...

CVE-2025-54242

Premiere Pro versions 25.3, 24.6.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file, and scope is unchanged...

CVE-2025-54242 Premiere Pro | Use After Free (CWE-416)

Premiere Pro versions 25.3, 24.6.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file, and scope is unchanged...

CVE-2025-54242 Premiere Pro | Use After Free (CWE-416)

Premiere Pro versions 25.3, 24.6.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file, and scope is unchanged...

CVE-2025-54242

Affected software: Adobe Premiere Pro. Vulnerable components: memory management in Premiere Pro (Use After Free, CWE-416) leading to arbitrary code execution in the context of the current user. Affected versions: 25.3, 24.6.5 and earlier. Root cause: Use After Free condition as described in multi...

PT-2025-36986

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.2 and earlier Description: Substance3D - Modeler is affected by an Integer Overflow or Wraparound vulnerability. Successful exploitation of this issue could lead to arbitrary code execution within the conte...

PT-2025-36962

Name of the Vulnerable Software and Affected Versions: After Effects versions 25.3 and earlier After Effects version 24.6.7 Description: After Effects is susceptible to an out-of-bounds read issue, which may result in memory exposure and potential disclosure of sensitive information. Successful...

PT-2025-36964

Name of the Vulnerable Software and Affected Versions: After Effects versions 25.3 and earlier After Effects version 24.6.7 Description: After Effects versions 25.3 and earlier, and version 24.6.7 are affected by an out-of-bounds read issue that may lead to memory exposure, potentially disclosing...

PT-2025-36974

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25.1 and earlier Description: Substance3D - Viewer is affected by a Heap-based Buffer Overflow that may lead to arbitrary code execution with current user privileges. Exploitation requires a user to open a...

PT-2025-36975

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25.1 and earlier Description: Substance3D - Viewer is affected by an out-of-bounds write issue that may lead to arbitrary code execution with the privileges of the current user. A user must open a specially...

PT-2025-36913

Name of the Vulnerable Software and Affected Versions: Premiere Pro versions 25.3 and earlier Premiere Pro version 24.6.5 Description: Premiere Pro versions 25.3 and earlier, and version 24.6.5 are susceptible to a Use After Free issue. Successful exploitation could lead to arbitrary code executi...

PT-2025-36950

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions 2020 and earlier Adobe Acrobat Reader versions 2020 and earlier Adobe Acrobat versions 24.001.30254 and earlier Adobe Acrobat Reader versions 24.001.30254 and earlier Adobe Acrobat versions 25.001.20672 and earlier Adobe...

PT-2025-36963

Name of the Vulnerable Software and Affected Versions: After Effects versions 25.3 and earlier After Effects version 24.6.7 Description: After Effects is susceptible to an out-of-bounds read issue, which may result in memory exposure and potential disclosure of sensitive information. Successful...

PT-2025-36973

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25.1 and earlier Description: Substance3D - Viewer is affected by an out-of-bounds write issue that may lead to arbitrary code execution with current user privileges. Successful exploitation requires a user to...

Halo 安全漏洞

Halo is a powerful and easy-to-use open source website builder from Halo Open Source. A security vulnerability exists in Halo v2.20.17 and earlier versions, which stems from a server-side request forgery that could lead to the upload of malicious files...

PT-2025-36985

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.2 and earlier Description: Substance3D - Modeler is affected by a Use After Free vulnerability. Successful exploitation of this issue could lead to arbitrary code execution within the context of the current...

Mobile Shop Management System AddNewProduct.php file code problem vulnerability

Mobile Shop Management System is a store management system. Mobile Shop Management System has a code issue vulnerability that stems from the lack of valid validation of uploaded files in the parameter ProductImage in the file AddNewProduct.php. An attacker can exploit this vulnerability to upload...