May 2020 Patch Tuesday – 111 Vulns, 16 Critical, SharePoint, VS Code, Adobe Patches

Continuing the trend of large Microsoft Patch Tuesdays, this month’s addresses 111 vulnerabilities with 16 of them labeled as Critical. The 16 Critical vulnerabilities cover SharePoint, Browsers, Scripting Engines, Media Foundation, Microsoft Graphics, Microsoft Color Management, and the VS Code...

Adobe Kills 16 Critical Flaws in Acrobat and Reader, Digital Negative SDK

Adobe has fixed 16 critical flaws across its Acrobat and Reader applications and its Adobe Digital Negative DNG Software Development Kit. If exploited, the flaws could lead to remote code execution. Overall, Adobe fixed vulnerabilities tied to 36 CVEs in its regularly-scheduled Tuesday security...

Vulnerability Spotlight: Remote code execution vulnerabilities in Adobe Acrobat Reader

Aleksandar Nikolic of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered two remote code execution vulnerabilities in Adobe Acrobat Reader. Acrobat supports a number of features, including the ability to process embedded JavaScript. These flaws...

PT-2020-5439

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader version 2015.006.30518 and earlier Description The issue is related to an out-of-bounds read in...

PT-2020-6289

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader version 2015.006.30518 and earlier Description The issue is related to a stack exhaustion...

PT-2020-2713

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader versions 2015.006.30518 and earlier Description The issue is related to an out-of-bounds write...

KLA11780 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Memor...

Adobe Acrobat Reader DC JPEG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Acrobat Reader DC JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities affecting Adobe DNG Software Development Kit, Acrobat, and Reader. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourag...

PT-2020-2724

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader version 2015.006.30518 and earlier Description The issue is related to a buffer error...

PT-2020-2719

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2020.006.20042 Adobe Acrobat Reader versions prior to 2020.006.20042 Adobe Acrobat 2017 versions prior to 2017.011.30166 Adobe Acrobat Reader 2017 versions prior to 2017.011.30166 Adobe Acrobat 2015 versions pri...

PT-2020-5458

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2020.006.20042 Adobe Acrobat Reader versions prior to 2020.006.20042 Adobe Acrobat 2017 versions prior to 2017.011.30166 Adobe Acrobat Reader 2017 versions prior to 2017.011.30166 Adobe Acrobat 2015 versions pri...

PT-2020-6362

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2015.006.30518 through 2020.006.20042 Adobe Acrobat and Reader versions 2017.011.30166 and earlier Description The issue is related to an out-of-bounds read in memory, which can be exploited by an attacker to...

PT-2020-6363

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader versions 2015.006.30518 and earlier Description The issue is related to an out-of-bounds read in...

PT-2020-2726

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader version 2015.006.30518 and earlier Description The issue is related to a use-after-free...

PT-2020-2588

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader version 2015.006.30518 and earlier Description The issue is caused by a race condition...

PT-2020-2718

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2020.006.20042 Adobe Acrobat Reader versions prior to 2020.006.20042 Adobe Acrobat 2017 versions prior to 2017.011.30166 Adobe Acrobat Reader 2017 versions prior to 2017.011.30166 Adobe Acrobat 2015 versions pri...

PT-2020-2725

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader version 2015.006.30518 and earlier Description The issue is related to a use-after-free...

PT-2020-2712

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2020.006.20042 and earlier Adobe Acrobat and Reader versions 2017.011.30166 and earlier Adobe Acrobat and Reader version 2015.006.30518 and earlier Description The issue is related to an out-of-bounds write...