CVE-2024-30284

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-30284

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-34100

Summary of CVE-2024-34100 details : Adobe Acrobat Reader DC/Classic contains a Use-After-Free vulnerability in a component used during file handling, allowing arbitrary code execution in the context of the logged-in user. Exploitation requires user interaction (victim opens a malicious file). Aff...

CVE-2024-34101 ZDI-CAN-23614: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-30284 ZDI-CAN-23466: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-34098 ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 1 of 2

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2024-34098

CVE-2024-34098 affects Adobe Acrobat Reader DC/2020 lines: versions 20.005.30574 and 24.002.20736 (and earlier) with an Improper Input Validation flaw that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious...

CVE-2024-34098 ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 1 of 2

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2024-30311 TALOS-2024-1946 - Adobe Acrobat Reader Font gvar GlyphVariationData out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-34095 ZDI-CAN-23475: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-34099

CVE-2024-34099 refers to an Improper Access Control vulnerability in Adobe Acrobat Reader that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a crafted/malicious file. Affected products include Acrobat Reader D...

CVE-2024-34096

Technical details for CVE-2024-34096 are not publicly available in the provided connected documents; monitor for updates from official advisories. The provided sources mention affected Acrobat versions but do not disclose vulnerability specifics in this dataset.

CVE-2024-34096 ZDI-CAN-23472: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-34096 ZDI-CAN-23472: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-34097

CVE-2024-34097 affects Adobe Acrobat Reader family (Windows/macOS) with a Use-After-Free issue in specific builds (e.g., 20.005.30574; 24.002.20736 and earlier) that can lead to arbitrary code execution in the current user context and requires user interaction (opening a malicious file). The vuln...

CVE-2024-34094 ZDI-CAN-23474: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-34094

Technical details about CVE-2024-34094 are not publicly available in the provided connected documents. Monitor for updates. If needed, refer to the initial description for the high-level impact (Use After Free causing arbitrary code execution with user interaction).

CVE-2024-30310

CVE-2024-30310 affects Adobe Acrobat Reader: out-of-bounds write in the PDF rendering path could lead to arbitrary code execution in the current user context. Affected: Acrobat Reader 20.005.30574, 24.002.20736 and earlier. Exploitation requires user interaction (opening a malicious file). CVSSv3...

Cross-Site Scripting (XSS)

prestashop/prestashop is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the customer thread feature allowing malicious file uploads through the front-office contact form. When an admin opens the attached file in back office, arbitrary JavaScript will be executed which can...

PT-2024-3640 · Cisco · Cisco Crosswork Network Services Orchestrator

Name of the Vulnerable Software and Affected Versions: Cisco Crosswork Network Services Orchestrator NSO affected versions not specified Description: A vulnerability in the Tail-f High Availability Cluster Communications HCC function pack could allow an authenticated, local attacker to elevate...