CVE-2024-53951

Adobe InDesign Desktop (ID19.5, ID18.5.4 and earlier) is affected by an out-of-bounds read vulnerability that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). The issue is documented across multiple sources (CVE-2024-53951; Ado...

CVE-2024-49547 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49547 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49547

CVE-2024-49547 affects Adobe InDesign Desktop variants ID19.5, ID18.5.4 and earlier. It is an out-of-bounds read vulnerability that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). Adobe released APSB24-97 with security updates; o...

CVE-2024-53952

CVE-2024-53952 affects Adobe InDesign Desktop (ID19.5, ID18.5.4 and earlier) and is due to a NULL pointer dereference, causing application denial-of-service. Exploitation requires a user to open a malicious file, leading to a crash which qualifies as a DoS condition. Connected sources corroborate...

CVE-2024-49548 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49548

CVE-2024-49548 pertains to Adobe InDesign Desktop, affecting ID19.5, ID18.5.4 and earlier. The issue is an out-of-bounds read that can disclose sensitive memory and bypass mitigations like ASLR. Exploitation requires user interaction: the victim must open a malicious file. Public sources in the c...

CVE-2024-49549 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49544 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49544 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49549 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49543

CVE-2024-49543 affects Adobe InDesign Desktop versions ID19.5, ID18.5.4 and earlier. The issue is a stack-based buffer overflow that can lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). Connected sources corr...

CVE-2024-49543 InDesign Desktop | Stack-based Buffer Overflow (CWE-121)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-54050

CVE-2024-54050 is an Open Redirect vulnerability affecting Adobe Connect versions 12.6, 11.4.7 and earlier. The issue allows a URL redirection to an untrusted site, enabling attackers to redirect users to malicious websites. Exploitation requires user interaction. Public sources in the connected ...

CVE-2024-54037 Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user input, th...

CVE-2024-54037

Adobe Connect is affected by a DOM-based XSS vulnerability in versions 12.6, 11.4.7 and earlier. Exploitation requires user interaction (crafted URL or input) and can lead to arbitrary code execution in the victim’s browser, with potential session takeover and high confidentiality/integrity impac...

CVE-2024-54051 Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction...

CVE-2024-45155 Animate | Access of Uninitialized Pointer (CWE-824)

Animate versions 23.0.8, 24.0.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-53953

CVE-2024-53953 (Adobe Animate) is a Use After Free vulnerability in Animate versions 23.0.8, 24.0.5 and earlier that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affected components are the Animate runt...

CVE-2024-52989

Adobe Animate is affected by an Integer Underflow (Wrap or Wraparound) in versions 23.0.8, 24.0.5 and earlier, which could lead to arbitrary code execution in the context of the current user after opening a malicious file. Exploitation requires user interaction. A fix is available: update to Anim...