Design/Logic Flaw

Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the...

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is an application developed and distributed by Adobe for image processing. A buffer overflow vulnerability exists in Adobe Photoshop, which could lead to the execution of arbitrary code in the context of the current user. An attacker could exploit this vulnerability to cause a...

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is an application developed and distributed by Adobe for image processing.Adobe Photoshop is vulnerable to a buffer overflow vulnerability that could lead to the execution of arbitrary code in the context of the current user. An attacker could exploit this vulnerability to execute...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is an application produced by Adobe for professional word processing. Adobe InCopy suffers from a buffer overflow vulnerability that could lead to the execution of arbitrary code in the context of the current user. An attacker could exploit this vulnerability to cause a buffer overfl...

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is an application developed and distributed by Adobe for image processing. Adobe Photoshop suffers from a buffer overflow vulnerability that could lead to the execution of arbitrary code in the context of the current user. An attacker could exploit the vulnerability to cause a...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is an application from Adobe for professional word processing. Adobe InCopy 17.3 and 16.4.2 and previous versions are vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe Illustrator 输入验证错误漏洞

Adobe Illustrator is a software released by Adobe Systems for graphics. Adobe Illustrator is vulnerable to an input validation error, which can be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe Animate 缓冲区错误漏洞

Adobe Animate is a multimedia creation and computer animation program developed by Adobe for designing vector graphics and animations. Adobe Animate suffers from a buffer overflow vulnerability that could lead to the execution of arbitrary code in the context of the current user. An attacker can...

Adobe Photoshop 资源管理错误漏洞

Adobe Photoshop is an application developed and distributed by Adobe for image processing. A security vulnerability exists in Adobe Photoshop that could lead to the execution of arbitrary code in the context of the current user. An attacker can exploit the vulnerability to execute malicious code...

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is a software application developed and distributed by Adobe for image processing. A security vulnerability exists in Adobe Photoshop that could lead to the execution of arbitrary code in the context of the current user. An attacker can exploit the vulnerability to execute code in...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is an application produced by Adobe for professional word processing. Adobe InCopy suffers from a buffer overflow vulnerability that could lead to the execution of arbitrary code in the context of the current user. An attacker could exploit this vulnerability to cause a buffer overfl...

Apple macOS LaunchServices Sandbox Escape Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escape the sandbox on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of XPC...

CVE-2021-29117

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...

Adobe Illustrator Resource Management Error Vulnerability (CNVD-2023-07324)

Adobe Illustrator is a vector-based image creation software from Adobe. Adobe Illustrator is vulnerable to resource management errors, which can be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe Illustrator 资源管理错误漏洞

Adobe Illustrator is a vector-based image creation software from Adobe. Adobe Illustrator is vulnerable to resource management errors, which can be exploited by attackers to execute arbitrary code in the context of the current user...

CVE-2022-27580

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges ...

Safety 代码问题漏洞

Safety is a Python based software package for checking the safety of programs. A security vulnerability exists in Safety Designer 1.11.0 and earlier versions, which stems from a deserialization vulnerability in the .NET Framework classes used and not properly checked, which allows an attacker to...

SICK Flexi Soft Designer 代码问题漏洞

SICK Flexi Soft Designer is a configuration tool from SICK. A security vulnerability exists in SICK Flexi Soft Designer version 1.9.4 SP1 and below, which stems from a deserialization vulnerability in a .NET Framework class that is used and not properly checked, which allows an attacker to create...

CVE-2022-34246

Adobe InDesign versions 17.2.1 and earlier and 16.4.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a maliciou...

CVE-2022-34220

Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 17.012.30229 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th...