Cross site scripting

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Design/Logic Flaw

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue require...

Design/Logic Flaw

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

Design/Logic Flaw

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

Design/Logic Flaw

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-47056 ZDI-CAN-21763: Adobe Premiere Pro MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2023-47056

Adobe Premiere Pro is affected by CVE-2023-47056, a heap-based buffer overflow in 24.0 and earlier (including 23.6 and earlier) that could allow arbitrary code execution. Exploitation requires user interaction (opening a malicious file). Remediation: update to versions provided in APSB23-65 (e.g....

CVE-2023-47060

Adobe Premiere Pro is affected by CVE-2023-47060 as part of APSB23-65. Versions 24.0 and earlier, and 23.6 and earlier, contain an Access of Uninitialized Pointer vulnerability that can disclose memory and defeat mitigations such as ASLR. Exploitation requires user interaction via opening a malic...

CVE-2023-47060 ZDI-CAN-21792: Adobe Premiere Pro MP4 File Uninitialized Variable Information Disclosure Vulnerability

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue require...

CVE-2023-47058 ZDI-CAN-21766: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47058

Adobe Premiere Pro is affected by CVE-2023-47058, an out-of-bounds read during parsing of crafted files that could allow code execution in the user’s context. Affected versions: 24.0 and earlier, and 23.6 and earlier. Exploitation requires user interaction (victim opens a malicious file). Patches...

CVE-2023-47058 ZDI-CAN-21766: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47059

Adobe Premiere Pro is affected by an out-of-bounds read vulnerability when parsing crafted files, enabling potential remote code execution in the context of the current user. Affected versions: 24.0 and earlier, and 23.6 and earlier. Exploitation requires user interaction (victim opens a maliciou...

CVE-2023-47059 ZDI-CAN-21767: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47059 ZDI-CAN-21767: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the contex...

CVE-2023-47055 ZDI-CAN-21765: Adobe Premiere Pro M4A File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-47055

Adobe Premiere Pro—versions 24.0 and earlier, and 23.6 and earlier—are affected by CVE-2023-47055 (Use-After-Free in M4A parsing) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). The issue is addr...

CVE-2023-47055 ZDI-CAN-21765: Adobe Premiere Pro M4A File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-47057

CVE-2023-47057 affects Adobe Premiere Pro 24.0 and earlier, and 23.6 and earlier. The issue is an out-of-bounds write in the MP4/file parsing path that can allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a crafted file). ...

CVE-2023-47057 ZDI-CAN-21764: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...