9893 matches found
Design/Logic Flaw
Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
Design/Logic Flaw
Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
Design/Logic Flaw
Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
Design/Logic Flaw
Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
CVE-2022-30676 Adobe InDesign 2022 Out-of-Bound Read Memory leak
Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
CVE-2022-30675
Adobe InDesign 16.x prior to 16.4.3 and 17.x prior to 17.4 is affected by an out-of-bounds read vulnerability (CVE-2022-30675) that could disclose memory and bypass ASLR. Exploitation requires a user to open a malicious file. Remediation: Adobe APSB22-50 indicates fixes in 16.4.3 and 17.4; update...
CVE-2022-30674
Concrete details from connected docs show that CVE-2022-30674 is addressed by updating the mingw-expat (XML parser Expat) package to version 2.4.9 in Fedora advisories for FC35–FC37. The Fedora security advisories state that the remote host’s mingw-expat package is vulnerable and that upgrading ...
CVE-2022-28855
Adobe InDesign is affected by an out-of-bounds read vulnerability (CVE-2022-28855) in 16.x prior to 16.4.3 and 17.x prior to 17.4. The issue could disclose memory and potentially bypass mitigations such as ASLR. Exploitation requires a user to open a malicious file. The connected documents corrob...
CVE-2022-28857
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected sources corroborate the same CVE-2022-28857 and des...
CVE-2022-28856
CVE-2022-28856 affects Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier. It is described as an out-of-bounds read vulnerability that could disclose sensitive memory and bypass mitigations such as ASLR. Exploitation requires user interaction, specifically that a victim opens a malic...
CVE-2022-38428
Adobe Photoshop: CVE-2022-38428 is a Use-After-Free vulnerability affecting Photoshop 22.5.8 and earlier, and 23.4.2 and earlier. The issue can disclose memory and bypass ASLR; exploitation requires user interaction (opening a malicious file). Connected advisories confirm it affects Windows/macOS...
CVE-2022-38409
Adobe Illustrator versions 26.4 and earlier and 25.4.7 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
CVE-2022-38410
Adobe Illustrator versions 26.4 and earlier and 25.4.7 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
CVE-2022-38407 Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interactio...
CVE-2022-38406
Adobe InCopy versions 17.3 and earlier, and 16.4.2 and earlier, are affected by an out-of-bounds read vulnerability (CVE-2022-38406) that could disclose memory and bypass mitigations such as ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected software: InCopy 17...
CVE-2022-38406 Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interactio...
CVE-2022-38409
Adobe Illustrator CVE-2022-38409 describes an out-of-bounds read affecting Illustrator 26.4 and earlier and 25.4.7 and earlier, enabling memory disclosure and ASLR bypass. Exploitation requires user interaction (opening a malicious file). Connected sources corroborate the same vulnerability and r...
CVE-2022-29240
Scylla is a real-time big data database that is API-compatible with Apache Cassandra and Amazon DynamoDB. When decompressing CQL frame received from user, Scylla assumes that user-provided uncompressed length is correct. If user provides fake length, that is greater than the real one, part of...
CVE-2022-29240 Uninitialized memory read in LZ4 decompression leads to authentication bypass in Scylla
Scylla is a real-time big data database that is API-compatible with Apache Cassandra and Amazon DynamoDB. When decompressing CQL frame received from user, Scylla assumes that user-provided uncompressed length is correct. If user provides fake length, that is greater than the real one, part of...
Adobe Bridge 11.x < 11.1.4 / 12.x < 12.0.3 Multiple Vulnerabilities (APSB22-49)
The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 11.1.4 or 12.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-49 advisory. - Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Heap-based...