Lucene search
+L
ZdiMost viewed

17156 matches found

Zero Day Initiative
Zero Day Initiative
•added 2015/04/29 12:00 a.m.•47 views

Samsung Security Manager ActiveMQ Broker Service MOVE Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Security Manager. Authentication is not required to exploit this vulnerability. Successful exploitation allows an attacker to gain complete control of the system on which the product is...

10CVSS7.4AI score0.10236EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2015/02/27 12:00 a.m.•47 views

(0Day) Agilent Technologies Feature Extraction ActiveX Control Index Out-Of-Bounds Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Agilent Technologies Feature Extraction. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.5CVSS6.8AI score0.02788EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2014/12/09 12:00 a.m.•47 views

SAP SQL Anywhere .NET Data Provider Malformed Integer Stack Buffer Overflow Code Execution Vulnerability

This allows attackers to execute arbitrary code on applications which pass user provided data to the vulnerable API in SAP SQL Anywhere. The specific flaw exists within the handling of a malformed integer constant. If an application allows untrusted input to be used in a query, even if the input ...

7.5CVSS7.6AI score0.03938EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2014/10/01 12:00 a.m.•47 views

Sophos Cyberoam diagnose Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sophos Cyberoam. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the diagnose...

9.3CVSS6.9AI score0.03661EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2014/10/01 12:00 a.m.•47 views

Hewlett-Packard Network Node Manager ovopi.dll Option -D Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within ovopi.dll which listens by default on a UDP port 696. When parsin...

10CVSS7.2AI score0.65435EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2014/06/11 12:00 a.m.•47 views

Microsoft Internet Explorer CDXTFilterNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS6.3AI score0.20451EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2014/06/11 12:00 a.m.•47 views

Microsoft Internet Explorer CWindow Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS6.3AI score0.21735EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2014/02/13 12:00 a.m.•47 views

Microsoft Internet Explorer CDomRange Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS6.3AI score0.23541EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2014/02/05 12:00 a.m.•47 views

Adobe Flash Player Jump Opcode Information Leak Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

10CVSS6.4AI score0.05691EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2013/07/26 12:00 a.m.•47 views

Microsoft Windows win32k.sys Privilege Escalation Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must run a malicious executable. The specific flaw exists within the handling of Dynamic Data Exchange...

7.2CVSS3.2AI score0.01743EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2013/05/29 12:00 a.m.•47 views

Microsoft Internet Explorer CMarkup Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with the...

9.3CVSS3.1AI score0.38223EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2013/05/29 12:00 a.m.•47 views

Microsoft Internet Explorer CMarkup Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS2.9AI score0.24087EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2013/02/11 12:00 a.m.•47 views

EMC NetWorker nsrck.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC NetWorker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way nsrck.exe handles a remotely supplied string. When handling RPC calls for opcode...

9.3CVSS3.3AI score0.03189EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2012/04/09 12:00 a.m.•47 views

Apple Quicktime PNG Depth Decoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of AppleQuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw occurs when the...

7.5CVSS4.3AI score0.03948EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2012/03/22 12:00 a.m.•47 views

RealNetworks RealPlayer RealAudio coded_frame_size Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required in that a target must visit a malicious page or open a malicious file. The flaw exists within cook.dll, specifically the handling of a RealAudi...

9.3CVSS5.1AI score0.03682EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2012/02/08 12:00 a.m.•47 views

Adobe Reader BMP Resource Signedness Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within 2d.x3d, which is...

9.8CVSS3.9AI score0.30253EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/10/27 12:00 a.m.•47 views

Apple Quicktime Empty URL Data Handler Remote Code Execution Vulnerability

This vulnerability allows remote attackers to potentially disclose memory addresses on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS3.1AI score0.0189EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2011/08/17 12:00 a.m.•47 views

Mozilla Firefox SVGTextElement.getCharNumAtPosition Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code...

10CVSS5.7AI score0.04805EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2011/08/16 12:00 a.m.•47 views

HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS6.5AI score0.7374EPSS
SaveExploits9References2
Zero Day Initiative
Zero Day Initiative
•added 2011/06/08 12:00 a.m.•47 views

Oracle Java ICC Profile MultiLanguage 'mluc' Tag Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the way Java handles color profiles. When parsing a...

10CVSS6AI score0.06329EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/03/18 12:00 a.m.•47 views

Novell Netware NWFTPD.NLM DELE Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is required to exploit this vulnerability. The flaw exists within NWFTPD.NLM. When handling the argument provided to the DELE command the application copies user...

9CVSS3.2AI score0.14658EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2011/02/07 12:00 a.m.•47 views

(0Day) IBM Lotus Domino IMAP/POP3 Non-Printable Character Expansion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the POP3 and IMAP services while processing malformed e-mails. The...

10CVSS5.9AI score0.05912EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2011/01/18 12:00 a.m.•47 views

Oracle Beehive voice-servlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Beehive. Authentication is not required to exploit this vulnerability. The specific flaw exists within 'voice-servlet/prompt-qa/Index.jspf'. During the creation of a file used for storing an...

7.5CVSS3.4AI score0.76308EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
•added 2010/08/24 12:00 a.m.•47 views

Adobe Shockwave Player Director File FFFFFF88 Record Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

9.3CVSS7AI score0.06051EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2010/08/11 12:00 a.m.•47 views

Apple Webkit Button First-Letter Style Rendering Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. Authentication is not required to exploit this vulnerability. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ope...

9.3CVSS8.8AI score0.06691EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2010/07/20 12:00 a.m.•47 views

Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary client side script on vulnerable installations of Novell Groupwise WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within handling html messages sent to a Novell Groupwise WebAccess...

6.4AI score
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2010/06/21 12:00 a.m.•47 views

Adobe Flash Player LocalConnection Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the connect...

9.3CVSS5.9AI score0.06751EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2010/04/05 12:00 a.m.•47 views

Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability

This vulnerability allows remote attackers to violate security policies on vulnerable installations of Sun Java Runtime. User interaction is required to exploit this vulnerability in that the target must run a malicious applet. The specific flaw allows malicious applets to connect to network...

6.8CVSS2.5AI score0.03036EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2010/04/02 12:00 a.m.•47 views

Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the...

6.8CVSS4.9AI score0.0284EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2009/11/05 12:00 a.m.•47 views

Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Power Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of URL parameters when posting to the login form of the web bas...

10CVSS4.6AI score0.76706EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
•added 2009/08/18 12:00 a.m.•47 views

Oracle Secure Backup Administration Server Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup. User interaction is not required to exploit this vulnerability. The specific flaw exists in the logic used to authenticate a user to the administration server running on port...

10CVSS4.9AI score0.72638EPSS
SaveExploits7References1
Zero Day Initiative
Zero Day Initiative
•added 2007/03/28 12:00 a.m.•47 views

IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Domino Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the CRAM-MD5 authentication mechanism of nimap.exe which binds by default to TCP...

10CVSS3.6AI score0.6122EPSS
SaveExploits8References1
Zero Day Initiative
Zero Day Initiative
•added 2006/12/19 12:00 a.m.•47 views

Mozilla Firefox SVG Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the browser's handling of SVG comment objects...

9.3CVSS3.7AI score0.0889EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2006/11/14 12:00 a.m.•47 views

Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific vulnerability exists due to improper parsing of HTML CS...

5.1CVSS3.8AI score0.25389EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2006/11/10 12:00 a.m.•47 views

Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Marshal MailMarshal formerly of NetIQ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the extraction and scanning of ARJ compressed attachments. Due t...

10CVSS4.1AI score0.03877EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2006/08/08 12:00 a.m.•47 views

Microsoft Internet Explorer Multiple CSS Imports Memory Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists due to improper garbage collection when...

7.5CVSS2.3AI score0.41215EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2026/02/05 12:00 a.m.•46 views

(Pwn2Own) Lexmark CX532adwe libesffls Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX532adwe printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the libesffls binary. The issue results from the lack of proper...

8.8CVSS6.2AI score0.00807EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/08/06 12:00 a.m.•46 views

(0Day) Microsoft Edge PDF NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of lin...

6.5CVSS6.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/06/21 12:00 a.m.•46 views

(Pwn2Own) Ubiquiti Networks EV Station EVCLauncher Improper Certificate Validation Vulnerability

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of Ubiquiti Networks EV Station. User interaction is not required to exploit this vulnerability. The specific flaw exists within the EVCLauncher application. The...

6.3CVSS6.4AI score0.00325EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/13 12:00 a.m.•46 views

Delta Electronics InfraSuite Device Master ActiveMQ Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics InfraSuite Device Master. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Apache ActiveMQ broker, which listens on TCP port 61616 b...

9.8CVSS7.7AI score0.99891EPSS
SaveExploits33References1
Zero Day Initiative
Zero Day Initiative
•added 2024/04/26 12:00 a.m.•46 views

(Pwn2Own) Oracle VirtualBox AHCI Controller Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS6.3AI score0.00392EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/02/06 12:00 a.m.•46 views

(Pwn2Own) Canon imageCLASS MF753Cdw CADM setResource Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF753Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper...

8.8CVSS7.5AI score0.01383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/02/05 12:00 a.m.•46 views

(Pwn2Own) TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DHCP options. The issue results from the lack of...

7.5CVSS7.5AI score0.00912EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2024/01/04 12:00 a.m.•46 views

X.Org Server DeepCopyPointerClasses Out-Of-Bounds Access Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Button...

7.8CVSS7.7AI score0.01574EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•46 views

(0Day) Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5.5CVSS6.2AI score0.00784EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/11/15 12:00 a.m.•46 views

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.2AI score0.01846EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/10/11 12:00 a.m.•46 views

Microsoft Windows UMPDDrvCopyBits Type Confusion Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the target system must have multiple...

7.8CVSS7.5AI score0.11648EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•46 views

D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00874EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/17 12:00 a.m.•46 views

PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.8AI score0.00394EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/15 12:00 a.m.•46 views

(Pwn2Own) Adobe Acrobat Reader DC Net.HTTP.request Exposed Dangerous Method Sandbox Escape

This vulnerability allows remote attackers to escape the sandbox on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.0431EPSS
SaveExploits0References1
Total number of security vulnerabilities5000