CVE-2024-49537 After Effects | Stack-based Buffer Overflow (CWE-121)

After Effects versions 24.6.2, 25.0.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49553

CVE-2024-49553 affects Adobe Media Encoder 25.0, 24.6.3 and earlier with an out-of-bounds write that could execute code in the current user's context if a malicious file is opened. Connected sources confirm the issue and reference the APSB24-93 advisory; remediation is to update to the patched ve...

CVE-2024-49552 Media Encoder | Heap-based Buffer Overflow (CWE-122)

Media Encoder versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49552 Media Encoder | Heap-based Buffer Overflow (CWE-122)

Media Encoder versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49532

CVE-2024-49532 affects Adobe Acrobat Reader (DC/Continuous/Classic) across multiple builds (e.g., 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier). The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR; exploitation re...

CVE-2024-49533

CVE-2024-49533 affects Adobe Acrobat Reader family (DC/Classic/Continuous) versions including 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier. The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation require...

CVE-2024-49531

CVE-2024-49531 affects Adobe Acrobat Reader: specific vulnerable versions include 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier. Root cause is a NULL Pointer Dereference that can crash the app, causing a denial-of-service. Exploitation requires user interaction ...

CVE-2024-49533 Acrobat Reader | Out-of-bounds Read (CWE-125)

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2024-9901 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to improper input validation, which could result in a security feature bypass. A low-privileged attacker could leverage this to bypass security measures an...

PT-2024-9873 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.5, ID18.5.4 and earlier Description: The issue is related to a NULL Pointer Dereference that could result in an application denial-of-service. An attacker could exploit this to crash the application, leading to ...

Adobe Premiere Pro < 24.6.4 / 25.0 < 25.1 Arbitrary code execution (APSB24-104)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 24.6.4, 25.1. It is, therefore, affected by a vulnerability as referenced in the APSB24-104 advisory. - Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that...

PT-2024-33546 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier Description: A NULL Pointer Dereference vulnerability could result in an application denial-of-service. An attacker could exploit this...

Adobe Media Encoder < 24.6.4 / 25.0 < 25.1 Multiple Vulnerabilities (APSB24-93) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 24.6.4, 25.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-93 advisory. - Media Encoder versions 25.0, 24.6.3 and earlier are affected by an out-of-bounds write vulnerability th...

Adobe FrameMaker 2020 < 16.0.7 (2020.0.7) / Adobe FrameMaker 2022 < 17.0.5 (2022.0.5) Arbitrary Code Execution (APSB24-106)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.7 / Adobe FrameMaker 2022 17.0.5. It is, therefore, affected by a vulnerability as referenced in the apsb24-106 advisory. - Adobe Framemaker versions 2020.7, 2022.5 and earlier are affected...

Adobe InDesign < 19.5.1 / 19.0 < 20.0.0 Multiple Vulnerabilities (APSB24-97) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.1, 20.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-97 advisory. - InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Heap-based Buffer Overflow...

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Adobe Bridge 14.x < 14.1.4 / 15.x < 15.0.1 Vulnerability (APSB24-103)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 14.1.4 or 15.0.1. It is, therefore, affected by a vulnerability as referenced in the apsb24-103 advisory. - Bridge versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe Connect <= 11.4.7 Multiple Vulnerabilities (APSB24-99)

The version of Adobe Connect installed on the remote host is prior to 11.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-99 advisory. - Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that coul...

PT-2024-33527

Name of the Vulnerable Software and Affected Versions Smart Touch Call versions prior to 1.0.0.8 Description The use of implicit intent for sensitive communication in Smart Touch Call allows local attackers to launch privileged activities. User interaction is required to trigger this issue...

PT-2024-10653 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write due to improper input validation in the l2c lcc proc pdu function of l2c fcr.cc. This could lead ...