CVEs

129,022 total · page 2427 of 2,581

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-3016	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11280	Adobe Inc. Digital Editions	Hig	0.49	7.5	0.06	Aug 11, 2017	Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11279	Adobe Inc. Digital Editions	Hig	0.49	7.5	0.07	Aug 11, 2017	Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11278	Adobe Inc. Digital Editions	Hig	0.49	7.5	0.06	Aug 11, 2017	Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11277	Adobe Inc. Digital Editions	Hig	0.49	7.5	0.06	Aug 11, 2017	Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11276	Adobe Inc. Digital Editions	Hig	0.49	7.5	0.06	Aug 11, 2017	Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11275	Adobe Inc. Digital Editions	Hig	0.50	7.5	0.10	Aug 11, 2017	Adobe Digital Editions 4.5.4 and earlier has an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11272	Adobe Inc. Digital Editions	Hig	0.50	7.5	0.13	Aug 11, 2017	Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability.
CVE-2017-11271	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11270	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data…
CVE-2017-11269	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) image stream data.…
CVE-2017-11268	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private JPEG data.…
CVE-2017-11267	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data…
CVE-2017-11263	Adobe Inc. Acrobat	Hig	0.59	8.8	0.26	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal data structure manipulation related to document encoding. Successful exploitation…
CVE-2017-11262	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11261	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data and the…
CVE-2017-11260	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data…
CVE-2017-11259	Adobe Inc. Acrobat	Hig	0.58	8.8	0.13	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…
CVE-2017-11257	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11256	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when generating content using XFA layout engine. Successful exploitation could lead to arbitrary code…
CVE-2017-11254	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the Acrobat/Reader's JavaScript engine. Successful exploitation could lead to arbitrary code…
CVE-2017-11251	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 parsing module. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11241	Adobe Inc. Acrobat	Hig	0.58	8.8	0.15	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to polygons.…
CVE-2017-11237	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing module. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11235	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the image conversion engine when decompressing JPEG data. Successful exploitation could lead to…
CVE-2017-11234	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF data related to the way how the components of…
CVE-2017-11231	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in Acrobat/Reader rendering engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11229	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data Format (FDF).
CVE-2017-11228	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing JPEG 2000 (JP2) code stream data. Successful…
CVE-2017-11227	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…
CVE-2017-11226	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image processing engine when processing JPEG 2000 (JP2) code stream data. Successful…
CVE-2017-11224	Adobe Inc. Acrobat	Hig	0.58	8.8	0.09	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11223	Adobe Inc. Acrobat	Hig	0.58	8.8	0.10	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the core of the XFA engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11222	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) engine. Successful exploitation could lead to arbitrary…
CVE-2017-11221	Adobe Inc. Acrobat	Hig	0.58	8.8	0.09	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the annotation functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11220	Adobe Inc. Acrobat	Hig	0.58	8.8	0.15	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in an internal data structure. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11219	Adobe Inc. Acrobat	Hig	0.58	8.8	0.09	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA rendering engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11218	Adobe Inc. Acrobat	Hig	0.58	8.8	0.10	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in XFA event management. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11216	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11214	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11212	Adobe Inc. Acrobat	Hig	0.58	8.8	0.09	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text…
CVE-2017-11211	Adobe Inc. Acrobat	Hig	0.59	8.8	0.27	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the JPEG parser. Successful exploitation could lead to arbitrary code execution.
CVE-2017-8273	Google Android	Hig	0.51	7.8	0.00	Aug 11, 2017	In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot feature is disabled, with length greater than boot image buffer, a buffer overflow can occur.
CVE-2017-8271	Google Android	Hig	0.51	7.8	0.00	Aug 11, 2017	Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernel by an unsanitized userspace-controlled parameter.
CVE-2017-8264	Google Android	Hig	0.51	7.8	0.00	Aug 11, 2017	A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the Linux kernel.
CVE-2017-8259	Google Android	Hig	0.51	7.8	0.00	Aug 11, 2017	In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer.
CVE-2017-7675	Apache Tomcat	Hig	0.43	7.5	0.10	Aug 11, 2017	The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.
CVE-2016-6796	Apache Tomcat	Hig	0.42	7.5	0.08	Aug 11, 2017	A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.
CVE-2016-8745	Apache Tomcat	Hig	0.43	7.5	0.16	Aug 10, 2017	A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple…
CVE-2016-6817	Apache Tomcat	Hig	0.42	7.5	0.07	Aug 10, 2017	The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible.

CVE-2017-3016HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11280HigAug 11, 2017
Adobe Inc.
Digital Editions
risk 0.49cvss 7.5epss 0.06
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11279HigAug 11, 2017
Adobe Inc.
Digital Editions
risk 0.49cvss 7.5epss 0.07
Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11278HigAug 11, 2017
Adobe Inc.
Digital Editions
risk 0.49cvss 7.5epss 0.06
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11277HigAug 11, 2017
Adobe Inc.
Digital Editions
risk 0.49cvss 7.5epss 0.06
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11276HigAug 11, 2017
Adobe Inc.
Digital Editions
risk 0.49cvss 7.5epss 0.06
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11275HigAug 11, 2017
Adobe Inc.
Digital Editions
risk 0.50cvss 7.5epss 0.10
Adobe Digital Editions 4.5.4 and earlier has an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11272HigAug 11, 2017
Adobe Inc.
Digital Editions
risk 0.50cvss 7.5epss 0.13
Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability.
CVE-2017-11271HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11270HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data…
CVE-2017-11269HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) image stream data.…
CVE-2017-11268HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private JPEG data.…
CVE-2017-11267HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data…
CVE-2017-11263HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.59cvss 8.8epss 0.26
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal data structure manipulation related to document encoding. Successful exploitation…
CVE-2017-11262HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11261HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data and the…
CVE-2017-11260HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data…
CVE-2017-11259HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.13
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…
CVE-2017-11257HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11256HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when generating content using XFA layout engine. Successful exploitation could lead to arbitrary code…
CVE-2017-11254HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the Acrobat/Reader's JavaScript engine. Successful exploitation could lead to arbitrary code…
CVE-2017-11251HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 parsing module. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11241HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.15
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to polygons.…
CVE-2017-11237HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing module. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11235HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the image conversion engine when decompressing JPEG data. Successful exploitation could lead to…
CVE-2017-11234HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF data related to the way how the components of…
CVE-2017-11231HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in Acrobat/Reader rendering engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11229HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data Format (FDF).
CVE-2017-11228HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing JPEG 2000 (JP2) code stream data. Successful…
CVE-2017-11227HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…
CVE-2017-11226HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image processing engine when processing JPEG 2000 (JP2) code stream data. Successful…
CVE-2017-11224HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11223HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.10
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the core of the XFA engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11222HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) engine. Successful exploitation could lead to arbitrary…
CVE-2017-11221HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the annotation functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11220HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.15
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in an internal data structure. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11219HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA rendering engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11218HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.10
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in XFA event management. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11216HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11214HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11212HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text…
CVE-2017-11211HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.59cvss 8.8epss 0.27
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the JPEG parser. Successful exploitation could lead to arbitrary code execution.
CVE-2017-8273HigAug 11, 2017
Google
Android
risk 0.51cvss 7.8epss 0.00
In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot feature is disabled, with length greater than boot image buffer, a buffer overflow can occur.
CVE-2017-8271HigAug 11, 2017
Google
Android
risk 0.51cvss 7.8epss 0.00
Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernel by an unsanitized userspace-controlled parameter.
CVE-2017-8264HigAug 11, 2017
Google
Android
risk 0.51cvss 7.8epss 0.00
A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the Linux kernel.
CVE-2017-8259HigAug 11, 2017
Google
Android
risk 0.51cvss 7.8epss 0.00
In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer.
CVE-2017-7675HigAug 11, 2017
Apache
Tomcat
risk 0.43cvss 7.5epss 0.10
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.
CVE-2016-6796HigAug 11, 2017
Apache
Tomcat
risk 0.42cvss 7.5epss 0.08
A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.
CVE-2016-8745HigAug 10, 2017
Apache
Tomcat
risk 0.43cvss 7.5epss 0.16
A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple…
CVE-2016-6817HigAug 10, 2017
Apache
Tomcat
risk 0.42cvss 7.5epss 0.07
The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible.