CVE-2024-49533

CVE-2024-49533 affects Adobe Acrobat Reader family (DC/Classic/Continuous) versions including 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier. The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation require...

Adobe Illustrator < 28.7.3 / 29.0.0 < 29.1.0 Multiple Arbitrary code execution (APSB24-94) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.3, 29.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-94 advisory. - Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds write vulnerability th...

Adobe InDesign < 19.5.1 / 19.0 < 20.0.0 Multiple Vulnerabilities (APSB24-97) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.1, 20.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-97 advisory. - InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Heap-based Buffer Overflow...

CVE-2024-52998 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-49536

Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...

CVE-2024-49536 Audition | Out-of-bounds Read (CWE-125)

Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...

CVE-2024-49512

InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49510

CVE-2024-49510 is an out-of-bounds read vulnerability in Adobe InDesign Desktop versions ID18.5.3, ID19.5 and earlier, capable of memory disclosure and potential ASLR bypass. Exploitation requires the victim to open a malicious file, with local attack vector. Connected sources corroborate the con...

CVE-2024-47437 Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-47440

Substance3D Painter 10.1.0 and earlier are affected by an out-of-bounds read (CWE-125) that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected product: Adobe Substance 3D Painter; vulnerability is addressed by the vendor in the ...

CVE-2024-45147

Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2024-47446

CVE-2024-47446 – Adobe After Effects : Affected are After Effects 23.6.9, 24.6.2 and earlier. The issue is an out-of-bounds read that could leak memory and bypass mitigations such as ASLR. Exploitation requires the user to open a malicious file (user interaction). The vulnerability is documented ...

CVE-2024-47446 After Effects | Out-of-bounds Read (CWE-125)

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

Adobe Illustrator < 28.7.2 Multiple Vulnerabilities (APSB24-87) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-87 advisory. - Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result ...

Adobe InDesign 16.0.0 < 16.4.1 Multiple Vulnerabilities (APSB22-05)

The version of Adobe InDesign installed on the remote Windows host is prior to 16.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-05 advisory. - Adobe InDesign version 16.4 and earlier is affected by an out-of-bounds write vulnerability that could result in...

Adobe After Effects < 18.4.3 / 22.0.0 < 22.1.1 Multiple Vulnerabilities (APSB21-115) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 18.4.3, 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-115 advisory. - Adobe After Effects versions 22.0 and earlier and 18.4.2 and earlier are affected by an out-of-bound...

CVE-2024-47419

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2024-47420

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2024-20787 Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-45111 Illustrator | Out-of-bounds Read (CWE-125)

Illustrator versions 28.6, 27.9.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...