1488 matches found
CVE-2023-44348
Adobe Acrobat Reader versions 23.006.20360 and earlier and 20.005.30524 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue...
CVE-2023-44340
Adobe Acrobat Reader versions 23.006.20360 and earlier and 20.005.30524 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue...
PT-2023-7145 · Adobe · Photoshop
Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 24.7.1 and earlier Adobe Photoshop versions 25.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this...
PT-2023-7141 · Adobe · Bridge
Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 13.0.4 and earlier Adobe Bridge versions 14.0.0 and earlier Description: The issue is related to the use of an uninitialized pointer in Adobe Bridge, which could lead to the disclosure of sensitive memory. An attacker...
PT-2023-7372 · Adobe · Premiere Pro
Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 24.0 and earlier Adobe Premiere Pro versions 23.6 and earlier Description: The issue is related to an Access of Uninitialized Pointer, which could lead to disclosure of sensitive memory. An attacker could leverage...
USN-6462-2: Linux kernel (IoT) vulnerabilities
Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information kernel memory or in conjunction with another kernel vulnerability. CVE-2023-0597 Yu Hao and Weite...
Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space
A possible unauthorized memory access flaw was found in the Linux kernel's cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implement...
The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer limit, allowing an attacker to bypass the ASLR protection mechanism.
The vulnerability of Adobe Dimension’s 3D design software relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...
The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.
The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...
The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.
The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...
The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.
The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...
The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.
The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...
The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.
The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...
The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer in memory, allowing an attacker to bypass the ASLR protection mechanism.
The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...
USN-6462-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities
Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information kernel memory or in conjunction with another kernel vulnerability. CVE-2023-0597 Yu Hao and Weite...
CLSA-2023-1698306895 Fix of 7 CVEs
CVE-2023-0597 // CVE-url: https://ubuntu.com/security/CVE-2023-0597 - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Do not shuffle CPU...
USN-6440-3 linux-aws-hwe vulnerabilities
Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information kernel memory or in conjunction with another kernel vulnerability. CVE-2023-0597 It was discovere...
USN-6440-1: Linux kernel vulnerabilities
Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information kernel memory or in conjunction with another kernel vulnerability. CVE-2023-0597 It was discovere...
CVE-2023-38217
Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
Adobe Bridge 缓冲区错误漏洞
Adobe Bridge is a powerful creative resource manager that lets users quickly and easily preview, organize, edit, and publish multiple creative resources, edit metadata, and add keywords, tags, and ratings to material resources.Adobe Bridge uses collections to organize assets and find assets using...