PT-2025-28640 · Dimension · Dimension

Name of the Vulnerable Software and Affected Versions: Dimension versions 4.1.2 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitati...

PT-2025-28494 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Substance3D - Designer versions 14.1 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-28787 · Adobe · Illustrator 29.5.1 +1

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.6 and earlier Illustrator version 29.5.1 and earlier Description: Illustrator versions 28.7.6 and earlier, and version 29.5.1 and earlier, are affected by an out-of-bounds read issue that may result in the disclosure...

PT-2025-28808 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in the parsing of DWG files due to insufficient validation of user-supplied data. This can lead to a memory corruption...

Adobe InDesign < 19.5.4 / 20.0 < 20.4.0 Multiple Arbitrary code execution (APSB25-60) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.4, 20.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-60 advisory. - InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe InDesign < 19.5.4 / 20.0 < 20.4.0 Multiple Arbitrary code execution (APSB25-60)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.4, 20.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-60 advisory. - InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe InCopy < 19.5.4 / 20.0 < 20.4.0 Multiple Vulnerabilities Arbitrary code execution (APSB25-59)

The version of Adobe InCopy installed on the remote host is prior to 19.5.4, 20.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-59 advisory. - InCopy versions 20.3, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could...

Adobe Audition < 24.6.7 / 25.0 < 25.3 Application denial-of-service (APSB25-56) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 24.6.7, 25.3. It is, therefore, affected by a vulnerability as referenced in the APSB25-56 advisory. - Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer...

PT-2025-28713 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in the parsing of DWG files due to insufficient validation of user-supplied data. This can lead to a memory corruption...

PT-2025-28818 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in the parsing of DWG files due to insufficient validation of user-supplied data. This can lead to a memory corruption...

PT-2025-28785 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8, 2022.6 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-28712 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in the parsing of DXF files due to insufficient validation of user-supplied data. This can lead to a memory corruption...

PT-2025-28825 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this issue, as...

PT-2025-28758

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 24.0 and earlier Description: Adobe Connect versions 24.0 and earlier are susceptible to a Deserialization of Untrusted Data issue. Successful exploitation of this issue could allow an attacker to execute arbitrary code...

CVE-2025-27203: Deserialization of Untrusted Data

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed...

Adobe FrameMaker 2020 < 16.0.9 (2020.0.9) / Adobe FrameMaker 2022 < 17.0.7 (2022.0.7) Multiple Vulnerabilities (APSB25-66)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.9 / Adobe FrameMaker 2022 17.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-66 advisory. - Adobe Framemaker versions 2020.8, 2022.6 and earlier are...

PT-2025-28704 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in the parsing of DWG files due to insufficient validation of user-supplied data. This can lead to a memory corruption...

(0Day) INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PM...

(0Day) INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT HMITool. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of VPM...

(0Day) INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT HMITool. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of VPM...