CVE-2015-3046

Technical details for CVE-2015-3046 are not publicly provided in the connected documents. Monitor for updates from vendors; no specifics on affected products, versions, impact, or fixes are included here.

CVE-2015-3076

CVE-2015-3076 is a memory-corruption vulnerability affecting Adobe Reader/Acrobat on Windows and OS X (Reader/Acrobat 10.x before 10.1.14 and 11.x before 11.0.11). Public advisories describe exploitation via parsing a malicious PDF (potentially containing JavaScript), leading to remote code execu...

CVE-2010-3888

A vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain elevated privileges. While the primary description lists unknown vectors, connected documents clarify that the flaw resides in the Task Scheduler 2.0 XML processing. The system fails to properly validate task file...

CVE-2010-3889

Technical details (affected products, components, versions, root cause, and exploit information) are not publicly provided in the connected documents. Monitor for updates.

CVE-2014-8454

Adobe Acrobat/Reader (Windows and macOS) contains a use-after-free vulnerability tracked as CVE-2014-8454 that affects the 10.x branch before 10.1.13 and the 11.x branch before 11.0.10. The issue is in memory object handling, allowing arbitrary code execution when a user opens a crafted PDF/file,...

CVE-2014-8451

CVE-2014-8451 concerns Adobe Reader/Acrobat 10.x (before 10.1.13) and 11.x (before 11.0.10) on Windows and OS X. The issue is an information-disclosure vulnerability arising from an improper implementation of a JavaScript API within the product. A remote attacker could lure a user to open a speci...

CVE-2015-3059

Adobe Acrobat/Reader vulnerable to a use-after-free in memory handling that could allow arbitrary code execution through a crafted PDF. Affected products: Adobe Acrobat/Reader 10.x (before 10.1.14) and 11.x (before 11.0.11) on Windows and macOS. Root cause: use-after-free in object handling. Reme...

CVE-2016-1715

CVE-2016-1715 affects the McAfee Application Control (MAC) kernel driver swin.sys on 32‑bit Windows. The issue is a memory corruption condition triggered by handling a 768 syscall, where a zero can be written to an arbitrary kernel memory location. This enables local attackers to cause a denial o...

CVE-2014-8445

CVE-2014-8445 involves memory corruption in Adobe Reader and Acrobat. The connected advisories describe vulnerability rooted in parsing a corrupted PDF file, allowing a remote attacker to trigger code execution or memory corruption by convincing a user to open a crafted PDF. Affected products are...

CVE-2015-3049

CVE-2015-3049 is a memory-disclosure flaw in the OpenType/Type 1 Charstring interpreter (transient array) that can leak uninitialized memory. Connected sources colocate this with Adobe Reader (CoolType) and Windows font engines (DirectWrite/WPF), indicating a cross-product issue in the font raste...

CVE-2014-8449

CVE-2014-8449 is an integer overflow in Adobe Reader/Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 that can allow arbitrary code execution via unspecified vectors. OpenVAS/Nessus entries corroborate multiple vulnerabilities in Acrobat/Reader around APSB14-28, with fixed versions cited as 10...

CVE-2014-9159

CVE-2014-9159 is a heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and macOS, enabling arbitrary code execution via unspecified vectors. The issue is documented as part of Adobe’s APSB14-28 advisories and is intertwined with related CV...

CVE-2016-4158

Adobe Creative Cloud Desktop on Windows prior to 3.7.0.272 is affected by CVE-2016-4158 (unquoted Windows search path) allowing local privilege escalation via a Trojan horse executable in %SYSTEMDRIVE%. Related CVE-2016-4157 affects installer search paths. The issue is addressed by the APSB16-21 ...

CVE-2014-8456

CVE-2014-8456 affects Adobe Reader/Acrobat on Windows and macOS. The issue is a memory corruption vulnerability in the PDF parsing path, allowing a remote attacker to execute arbitrary code or cause a crash when a user opens a specially crafted PDF. Affected versions include Adobe Reader and Acro...

CVE-2014-8447

CVE-2014-8447 is a memory corruption vulnerability reported in Adobe Reader and Acrobat. The issue arises when parsing a corrupted PDF file, per advisories APSB14-28 and related CPAI entries. A remote attacker may exploit this by enticing a target user to open a specially crafted PDF file, potent...

CVE-2014-8455

Adobe Acrobat/Reader (Windows and macOS) are affected by a use-after-free vulnerability in memory object handling, leading to arbitrary code execution when a user opens a specially crafted PDF. Affected products: Acrobat/Reader 10.x prior to 10.1.13 and 11.x prior to 11.0.10. The issue is trigger...

CVE-2011-3310

CVE-2011-3310 affects CiscoWorks Common Services for Microsoft Windows (pre-4.1). The Home Page component allows an authenticated remote attacker to execute arbitrary commands via a crafted URL, with system administrator privileges on the affected host. The vulnerability impacts multiple CiscoWor...

CVE-2014-8453

CVE-2014-8453 affects Cisco? (no) Actually affected product is Adobe Reader/Acrobat. The connected documents confirm that Adobe Reader/Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X are vulnerable. The underlying issue is a same-origin policy bypass, with exploit vectors ...

CVE-2014-8459

CVE-2014-8459 corresponds to a memory corruption vulnerability in Adobe Reader and Acrobat (APSB14-28). Based on connected advisories, the issue arises from incorrect memory handling while parsing a corrupted PDF file, allowing a remote attacker to entice a target user to open a crafted PDF and p...

CVE-2014-9165

Adobe Reader and Acrobat are affected by a use-after-free vulnerability in memory handling of objects, exploited via specially crafted PDFs to achieve arbitrary code execution. Affected products: Adobe Reader and Acrobat 10.x prior to 10.1.13 and 11.x prior to 11.0.10 on Windows and macOS. Root c...

CVE-2008-6194

CVE-2008-6194 is a memory-leak vulnerability in the Microsoft Windows DNS server that can be exploited remotely via DNS packets to cause a denial of service through memory consumption. The issue is noted as stemming from an incorrect fix for CVE-2007-3898. The connected documents do not specify a...

CVE-2014-8458

Adobe Reader and Acrobat (Windows and macOS) are affected by CVE-2014-8458, a memory-corruption flaw in PDF parsing that can lead to arbitrary code execution or a denial of service when processing a specially crafted PDF. The vulnerability is addressed in the Adobe APSB14-28 advisory family (APSB...

CVE-2014-8460

Adobe Reader/Acrobat is affected by CVE-2014-8460 (APSB14-28): a heap-based buffer overflow in the font data parsing path caused by the number of subroutines for an embedded font exceeding the subroutine array size, leading to a crash and potential arbitrary code execution. The issue is documente...

CVE-2014-7237

CVE-2014-7237 affects lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier on Windows. A remote attacker can bypass access restrictions and upload files with restricted names by exploiting a null byte (%00) in a filename to bin/upload.cgi, with demonstration via an .htaccess mechanism to execute arbit...

CVE-2014-8457

CVE-2014-8457 affects Adobe Reader/Acrobat on Windows and macOS, with a heap-based buffer overflow in the PDF parsing path of 10.x until 10.1.13 and 11.x until 11.0.10. The issue enables remote code execution via crafted PDF files (unspecified vectors). Connected advisories confirm this as a PDF ...

CVE-2014-8461

CVE-2014-8461 affects Adobe Reader/Acrobat on Windows and macOS (10.x before 10.1.13 and 11.x before 11.0.10). The issue is a memory corruption vulnerability caused by incorrect memory buffer allocation while parsing a corrupted PDF file; a remote attacker could exploit this by enticing a user to...