Lucene search
+L

1728 matches found

CVE
CVE
added 2022/10/14 7:50 p.m.88 views

CVE-2022-38443

Adobe Dimension 3.4.5 is affected by an out-of-bounds read in GLB file parsing, enabling potential disclosure of memory and bypass of ASLR. Exploitation requires user interaction (opening a malicious file). Affected product/component: Adobe Dimension, GLB parsing path. Root cause: out-of-bounds r...

5.5CVSS5.3AI score0.00334EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/14 7:50 p.m.28 views

CVE-2022-38445 Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS8AI score0.00405EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/10/14 7:50 p.m.8 views

CVE-2022-38442 Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00517EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/14 7:50 p.m.30 views

CVE-2022-38447 Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS8AI score0.00405EPSS
SaveExploits0References1
CVE
CVE
added 2022/10/14 7:50 p.m.69 views

CVE-2022-38447

Adobe Dimension 3.4.5 is affected by a use-after-free vulnerability in SKP file parsing that could allow arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file, and the issue is scored high in CVSS (local attacker, user interaction r...

7.8CVSS7.8AI score0.00405EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/10/14 7:50 p.m.69 views

CVE-2022-38440

CVE-2022-38440 affects Adobe Dimension 3.4.5, with an out-of-bounds read during parsing of a crafted file that could allow code execution in the caller’s context. Exploitation requires user interaction (victim must open a malicious file). The issue is addressed in a subsequent update (3.4.6+; APS...

7.8CVSS7.5AI score0.00472EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/14 7:50 p.m.29 views

CVE-2022-38440 Adobe Dimension SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation...

7.8CVSS7.7AI score0.00472EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/14 7:50 p.m.29 views

CVE-2022-38441 Adobe Dimension GLB File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation...

7.8CVSS7.7AI score0.00472EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/10/14 7:50 p.m.7 views

CVE-2022-38441 Adobe Dimension GLB File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation...

7.8CVSS7.5AI score0.00472EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/10/14 7:50 p.m.11 views

CVE-2022-38440 Adobe Dimension SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation...

7.8CVSS7.5AI score0.00472EPSS
SaveExploits0References1
CVE
CVE
added 2022/10/14 7:50 p.m.70 views

CVE-2022-38441

CVE-2022-38441 affects Adobe Dimension 3.4.5 and earlier, with an out-of-bounds read when parsing a crafted file that could allow code execution in the user’s context. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm this as a local/assembly-level ...

7.8CVSS7.5AI score0.00472EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2022/10/14 12:0 a.m.33 views

Adobe Dimension Memory Misreference Vulnerability

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. A memory mis-reference vulnerability exists in versions prior to Adobe Dimension 3.4.6, which stems from a "use-after-release" vulnerability that could be exploited to execute arbitrary code in the current user context...

7.8CVSS5.9AI score0.00517EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:0 a.m.24 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00405EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:0 a.m.27 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00517EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:0 a.m.23 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00405EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:0 a.m.28 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00405EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/10/14 12:0 a.m.40 views

Adobe Dimension code execution vulnerability

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. A code execution vulnerability exists in versions prior to Adobe Dimension 3.4.6, which stems from a "use-after-release" vulnerability that could be exploited to execute arbitrary code in the current user context...

7.8CVSS5.7AI score0.00405EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:0 a.m.28 views

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.2AI score0.00517EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/10/14 12:0 a.m.43 views

Adobe Dimension out-of-bounds read vulnerability

Adobe Dimension is a suite of 2D and 3D compositing design tools from Adobe, Inc. An out-of-bounds read vulnerability exists in versions prior to Adobe Dimension 3.4.6, which stems from an out-of-bounds read vulnerability when parsing constructed files, which could result in reading beyond the en...

7.8CVSS5.1AI score0.00472EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/10/14 12:0 a.m.35 views

Adobe Dimension memory leak vulnerability

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe. 3.4.6 previous versions of Adobe Dimension have a memory leak vulnerability, which stems from the impact of an out-of-bounds read vulnerability that could lead to sensitive memory leaks and could be used by attackers to bypa...

5.5CVSS4.1AI score0.00334EPSS
SaveExploits0References1
Rows per page
Query Builder