CVE-2025-27187

Adobe After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability (CVE-2025-27187) that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm the issue and cite APS...

CVE-2024-52998

The CVE-2024-52998 entry applies to Substance3D Stager, with affected versions 3.0.2 and earlier. The root cause is an out-of-bounds read vulnerability that can disclose sensitive memory and could bypass mitigations such as ASLR. Exploitation requires user interaction, specifically the victim ope...

CVE-2024-49529

CVE-2024-49529 affects Adobe InDesign Desktop versions 19.0, 20.0 and earlier with an out-of-bounds read that could disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Public detail from multiple sources confirms this is a memory-leak/Out-of-bounds Rea...

CVE-2024-49511 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-47436 Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-47435 Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-47440 Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-47454 Illustrator | Out-of-bounds Read (CWE-125)

Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim mu...

CVE-2024-45147 Bridge | Out-of-bounds Read (CWE-125)

Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2024-47446 After Effects | Out-of-bounds Read (CWE-125)

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

Adobe Illustrator < 25.4.6 / 26.0.0 < 26.3.1 Multiple Vulnerabilities (APSB22-26) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 25.4.6, 26.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-26 advisory. - Adobe Illustrator versions 26.0.2 and earlier and 25.4.5 and earlier are affected by an out-of-bounds...

Adobe After Effects < 18.2.1 Multiple Vulnerabilities (APSB21-49) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 18.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-49 advisory. - Adobe After Effects version 18.2 and earlier is affected by a Heap-based Buffer Overflow vulnerability when...

Adobe Illustrator < 25.4.4 / 26.0.0 < 26.0.3 Multiple Vulnerabilities (APSB22-07) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 25.4.4, 26.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-07 advisory. - Adobe Illustrator versions 25.4.3 and earlier and 26.0.2 and earlier are affected by a buffer overflow...

Adobe Illustrator < 25.4.8 / 26.0 < 26.5 Multiple Vulnerabilities (APSB22-55) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 25.4.8, 26.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-55 advisory. - Adobe Illustrator versions 26.4 and earlier and 25.4.7 and earlier are affected by an Improper Input...

Adobe Illustrator < 25.4.7 / 26.0.0 < 26.4.0 Multiple Vulnerabilities (APSB22-41) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 25.4.7, 26.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-41 advisory. - Adobe Illustrator versions 26.3.1 and earlier and 25.4.6 and earlier are affected by a Use After Free...

Adobe Media Encoder < 15.4.3 / 22.0.0 < 22.1.1 Multiple Vulnerabilities (APSB21-118) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 15.4.3, 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-118 advisory. - Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an out-of-bounds read...

CVE-2024-45145 Lightroom Desktop | Out-of-bounds Read (CWE-125)

Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction ...

CVE-2024-47420 Animate | Out-of-bounds Read (CWE-125)

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2024-20787 Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-39387

Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...