CVE-2024-45156

Animate versions 23.0.8, 24.0.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49541

Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-49537

After Effects versions 24.6.2, 25.0.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-45155

Animate versions 23.0.8, 24.0.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-53002

Substance3D Modeler 1.14.1 and earlier are affected by an out-of-bounds write (heap-based) vulnerability that could allow arbitrary code execution in the context of the current user when a user opens a malicious file. Exploitation requires user interaction, i.e., the victim must open a crafted fi...

CVE-2024-53000

CVE-2024-53000 affects Substance3D Modeler ≤ 1.14.1. The issue is an out-of-bounds write that can lead to arbitrary code execution in the context of the current user, with exploitation requiring the victim to open a malicious file. Multiple connected sources (PT-2024-9948, CNVD-2025-00377, NVD en...

CVE-2024-53001 Substance3D - Modeler | Out-of-bounds Write (CWE-787)

Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-53006

CVE-2024-53006 affects Substance3D Modeler 1.14.1 and earlier. The issue is a NULL pointer dereference in a component used by the modeler, leading to an application crash and denial of service. Exploitation requires user interaction: a victim must open a malicious file. Connected sources indicate...

CVE-2024-53003 Substance3D - Modeler | Out-of-bounds Write (CWE-787)

Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-52997

Photoshop Desktop (Windows/macOS) versions 26.0 and earlier are affected by a Use After Free vulnerability (CVE-2024-52997) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). The issue is tied t...

CVE-2024-52997 Photoshop Desktop | Use After Free (CWE-416)

Photoshop Desktop versions 26.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-52996

CVE-2024-52996 affects Adobe Substance 3D Sampler 4.5.1 and earlier. It is a Heap-based Buffer Overflow in the Substance3D Sampler component that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious fil...

CVE-2024-52996 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-52995 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49513 Not a product | Out-of-bounds Write (CWE-787)

PDFL SDK versions 21.0.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49513

CVE-2024-49513 affects PDFL SDK versions 21.0.0.5 and earlier. The vulnerability is an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the current user’s context. Exploitation requires user interaction via opening a malicious file. Remediation is available: Adobe relea...

CVE-2024-49549

CVE-2024-49549 affects Adobe InDesign Desktop versions ID19.5, ID18.5.4 and earlier. The vulnerability is an out-of-bounds read that could disclose sensitive memory and potentially bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file). Mul...

CVE-2024-49544

CVE-2024-49544 affects Adobe InDesign Desktop (ID19.5, ID18.5.4 and earlier). The issue is an out-of-bounds write that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction—victim must open a malicious file. Connected sources corroborate...

CVE-2024-49546

CVE-2024-49546 affects Adobe InDesign Desktop versions ID19.5, ID18.5.4 and earlier with an out-of-bounds read that can disclose sensitive memory and bypass ASLR. Exploitation requires a user to open a malicious file. The issue is corroborated by NVD entry for this CVE and supported by the APSB24...

CVE-2024-49545 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...