CVE-2020-3772

CVE-2020-3772 affects Adobe Photoshop CC 2019 (versions 20.0.8 and earlier) and Photoshop 2020 (versions 21.1 and earlier), described as a buffer errors vulnerability with potential arbitrary code execution on successful exploitation. Connected documents do not provide deeper root-cause details, ...

CVE-2020-3780

CVE-2020-3780 is part of Adobe Photoshop APSB20-14 family affecting Photoshop CC 2019 up to 20.0.8 and Photoshop 2020 up to 21.1.0 (pre-patch). The vulnerability is described as a memory/buffer-related issue that could allow arbitrary code execution, with the advisory noting memory/heap corruptio...

CVE-2020-3780

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-3770

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution...

Windows Language Pack Installer Privilege Escalation

The vulnerability of the Windows Language Pack Installer component in Windows operating systems is related to file operation errors. Exploiting this vulnerability can allow an attacker to execute processes in privileged mode using a specially created application...

Provisioning Runtime Privilege Escalation

The vulnerability of the Provisioning Runtime component in Windows operating systems is related to errors in file operation handling. Exploiting this vulnerability can allow an attacker to gain increased privileges by executing non-privileged code on the target system...

Universal Plug and Play (UPnP) Privilege Escalation

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application or a specially created script...

Universal Plug and Play (UPnP) Privilege Escalation

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application or a specially created script...

Windows Background Intelligent Transfer Service Privilege Escalation

The vulnerability of the Windows Background Intelligent Transfer Service, which is responsible for intelligent file transfer between clients and Windows HTTP servers, is related to errors in processing links that point to file and directory paths. Exploiting this vulnerability can allow an attack...

Windows device installation dispatcher Privilege Escalation

The vulnerability of the Windows device management agent is related to errors in file operations. Exploiting this vulnerability allows an attacker to execute processes with elevated privileges using a specially created application...

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (APSB20-14)

The version of Adobe Photoshop CC or Photoshop installed on the remote Windows host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 an...

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (macOS APSB20-14)

The version of Adobe Photoshop CC or Photoshop installed on the remote macOS or Mac OS X host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versio...

ChakraCore JavaScript Script Handler RCE

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Apex One OfficeScan Code Execution

The vulnerability of the Apex One and OfficeScan anti-virus software components is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ChakraCore JavaScript RCE

The vulnerability of the ChakraCore JavaScript script handler in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Azure DevOps Server Privilege Escalation

The vulnerabilities of Azure DevOps Server and Team Foundation Server software allow attackers to exploit object processing errors. Exploiting these vulnerabilities can enable remote attackers to gain increased privileges...

Adobe Photoshop CC Multiple Vulnerabilities (APSB20-14) - Mac OS X

Adobe Photoshop CC is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

zsh: insecure dropping of privileges when unsetting PRIVILEGED option

A flaw was found in zsh. When unsetting the PRIVILEGED option, the shell sets its effective user and group IDs to match their respective real IDs. When the RUID and EUID were both non-zero, it is possible to regain the shell's former privileges. Also, the setopt built-in did not correctly report...

Adobe Discloses Dozens of Critical Photoshop, Acrobat Reader Flaws

Adobe has released out-of-band updates addressing critical vulnerabilities in its Photoshop and Acrobat Reader products, which if exploited could allow arbitrary code-execution. Overall, Adobe on Wednesday patched flaws tied to 41 CVEs across its products, 29 of which were critical in severity. T...

Adobe Discloses Dozens of Critical Photoshop, Acrobat Reader Flaws

Adobe has released out-of-band updates addressing critical vulnerabilities in its Photoshop and Acrobat Reader products, which if exploited could allow arbitrary code-execution. Overall, Adobe on Wednesday patched flaws tied to 41 CVEs across its products, 29 of which were critical in severity. T...