4665 matches found
CVE-2022-38449
CVE-2022-38449 is an out-of-bounds read in Adobe Acrobat Reader DC/Acrobat (JP2/FOJP parsing) affecting versions 22.002.20212 and earlier, and 20.005.30381 and earlier. Exploitation requires the user to open a malicious file and could disclose memory, bypass ASLR. Remediation is to apply the APSB...
CVE-2022-38437 Adobe Acrobat Reader Use After Free Memory leak
Adobe Acrobat Reader versions 22.002.20212 and earlier and 20.005.30381 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requir...
CVE-2022-42342
Adobe Acrobat Reader DC/Continuous (Windows/macOS) is affected by CVE-2022-42342: an out-of-bounds read in font parsing could disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). The entry references the APSB22-46 update as remediation; affected version...
Adobe Dimension memory leak vulnerability
Adobe Dimension is a set of 2D and 3D composite design tools from Adobe. 3.4.6 previous versions of Adobe Dimension have a memory leak vulnerability, which stems from the impact of an out-of-bounds read vulnerability that could lead to sensitive memory leaks and could be used by attackers to bypa...
Adobe Acrobat < 20.005.30407 / 22.003.20258 Multiple Vulnerabilities (APSB22-46)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30407 or 22.003.20258. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.002.20212 and earlier and 20.005.30381 and earlier are affected by a Stack-based Buffer...
Adobe Reader < 20.005.30407 / 22.003.20258 Multiple Vulnerabilities (APSB22-46) (macOS)
The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30407 or 22.003.20258. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.002.20212 and earlier and 20.005.30381 and earlier are affected by a Stack-based Buffer...
Adobe Reader < 20.005.30407 / 22.003.20258 Multiple Vulnerabilities (APSB22-46)
The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30407 or 22.003.20258. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.002.20212 and earlier and 20.005.30381 and earlier are affected by a Stack-based Buffer...
CVE-2022-35709
Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...
Design/Logic Flaw
Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...
CVE-2022-38425 Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability
Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...
CVE-2022-35709
Adobe Bridge 12.0.2 and 11.1.3 (and earlier) are affected by a Use-After-Free that can disclose memory contents. Exploitation requires user interaction (victim opens a malicious file). This CVE is CVE-2022-35709. Nessus/APSB22-49 references confirm multiple vulnerabilities in Bridge with these ve...
CVE-2022-38425
CVE-2022-38425 affects Adobe Bridge (versions <=12.0.2 and
CVE-2022-35709 Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability
Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...
Adobe Illustrator out-of-bounds read vulnerability (CNVD-2023-07320)
Adobe Illustrator is a software released by Adobe Systems, Inc. for graphics production. An out-of-bounds read vulnerability exists in Adobe Illustrator, which can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...
Adobe Illustrator out-of-bounds read vulnerability (CNVD-2023-07322)
Adobe Illustrator is a software released by Adobe Systems, Inc. for graphics production. An out-of-bounds read vulnerability exists in Adobe Illustrator, which can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...
Adobe InCopy out-of-bounds read vulnerability (CNVD-2023-05232)
Adobe InCopy is an application produced by Adobe for professional word processing. Adobe InCopy 17.3 and 16.4.2 and previous versions have an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and obtain sensitive information...
Adobe InCopy out-of-bounds read vulnerability (CNVD-2023-05234)
Adobe InCopy is an application produced by Adobe for professional word processing. Adobe InCopy 17.3 and 16.4.2 and previous versions have an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and gain access to sensitive information...
CVE-2022-38407
Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interactio...
CVE-2022-38406
Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interactio...
CVE-2022-38407
Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interactio...