CVE-2024-52996 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-52995 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler versions 4.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-52995

Substance3D Sampler 4.5.1 and earlier are affected by a Heap-based Buffer Overflow (CVE-2024-52995) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Adobe’s APSB24-100 advisory and Nessus entry indicat...

CVE-2024-49513 Not a product | Out-of-bounds Write (CWE-787)

PDFL SDK versions 21.0.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-53951 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-53951 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-53951

Adobe InDesign Desktop (ID19.5, ID18.5.4 and earlier) is affected by an out-of-bounds read vulnerability that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). The issue is documented across multiple sources (CVE-2024-53951; Ado...

CVE-2024-49547

CVE-2024-49547 affects Adobe InDesign Desktop variants ID19.5, ID18.5.4 and earlier. It is an out-of-bounds read vulnerability that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). Adobe released APSB24-97 with security updates; o...

CVE-2024-49547 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49547 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-53952

CVE-2024-53952 affects Adobe InDesign Desktop (ID19.5, ID18.5.4 and earlier) and is due to a NULL pointer dereference, causing application denial-of-service. Exploitation requires a user to open a malicious file, leading to a crash which qualifies as a DoS condition. Connected sources corroborate...

CVE-2024-49548

CVE-2024-49548 pertains to Adobe InDesign Desktop, affecting ID19.5, ID18.5.4 and earlier. The issue is an out-of-bounds read that can disclose sensitive memory and bypass mitigations like ASLR. Exploitation requires user interaction: the victim must open a malicious file. Public sources in the c...

CVE-2024-49548 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49544 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49544 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49549 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49549 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49543 InDesign Desktop | Stack-based Buffer Overflow (CWE-121)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49543

CVE-2024-49543 affects Adobe InDesign Desktop versions ID19.5, ID18.5.4 and earlier. The issue is a stack-based buffer overflow that can lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). Connected sources corr...

CVE-2024-54050

CVE-2024-54050 is an Open Redirect vulnerability affecting Adobe Connect versions 12.6, 11.4.7 and earlier. The issue allows a URL redirection to an untrusted site, enabling attackers to redirect users to malicious websites. Exploitation requires user interaction. Public sources in the connected ...