Vendor CVEs

Adobe Inc.

All CVEs

7,663 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-11259	Adobe Inc. Acrobat	Hig	0.58	8.8	0.13	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…
CVE-2017-11257	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11256	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when generating content using XFA layout engine. Successful exploitation could lead to arbitrary code…
CVE-2017-11254	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the Acrobat/Reader's JavaScript engine. Successful exploitation could lead to arbitrary code…
CVE-2017-11251	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 parsing module. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11241	Adobe Inc. Acrobat	Hig	0.58	8.8	0.15	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to polygons.…
CVE-2017-11237	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing module. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11235	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the image conversion engine when decompressing JPEG data. Successful exploitation could lead to…
CVE-2017-11234	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF data related to the way how the components of…
CVE-2017-11231	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in Acrobat/Reader rendering engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11229	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data Format (FDF).
CVE-2017-11228	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing JPEG 2000 (JP2) code stream data. Successful…
CVE-2017-11227	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…
CVE-2017-11226	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image processing engine when processing JPEG 2000 (JP2) code stream data. Successful…
CVE-2017-11224	Adobe Inc. Acrobat	Hig	0.58	8.8	0.09	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11223	Adobe Inc. Acrobat	Hig	0.58	8.8	0.10	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the core of the XFA engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11222	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) engine. Successful exploitation could lead to arbitrary…
CVE-2017-11221	Adobe Inc. Acrobat	Hig	0.58	8.8	0.09	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the annotation functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11220	Adobe Inc. Acrobat	Hig	0.58	8.8	0.15	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in an internal data structure. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11219	Adobe Inc. Acrobat	Hig	0.58	8.8	0.09	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA rendering engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11218	Adobe Inc. Acrobat	Hig	0.58	8.8	0.10	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in XFA event management. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11216	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11214	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11212	Adobe Inc. Acrobat	Hig	0.58	8.8	0.09	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text…
CVE-2017-3099	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.09	Jul 17, 2017	Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3074	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.05	May 9, 2017	Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3073	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.05	May 9, 2017	Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory corruption. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3072	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.05	May 9, 2017	Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3071	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.06	May 9, 2017	Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3070	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.05	May 9, 2017	Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3069	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.05	May 9, 2017	Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3003	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.05	Mar 14, 2017	Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3002	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.05	Mar 14, 2017	Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3001	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.05	Mar 14, 2017	Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2999	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.04	Mar 14, 2017	Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2998	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.04	Mar 14, 2017	Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2997	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.07	Mar 14, 2017	Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2996	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.05	Feb 15, 2017	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2995	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.06	Feb 15, 2017	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2994	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.06	Feb 15, 2017	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2993	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.06	Feb 15, 2017	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2991	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.09	Feb 15, 2017	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary code execution.
CVE-2017-2990	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.10	Feb 15, 2017	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2987	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.09	Feb 15, 2017	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2982	Adobe Inc. Flash Player Desktop Runtime	Hig	0.58	8.8	0.06	Feb 15, 2017	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2937	Adobe Inc. Flashplayer	Hig	0.58	8.8	0.06	Jan 11, 2017	Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class inheritance. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2936	Adobe Inc. Flashplayer	Hig	0.58	8.8	0.06	Jan 11, 2017	Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2928	Adobe Inc. Flashplayer	Hig	0.58	8.8	0.05	Jan 11, 2017	Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to setting visual mode effects. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2927	Adobe Inc. Flashplayer	Hig	0.58	8.8	0.09	Jan 11, 2017	Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2926	Adobe Inc. Flashplayer	Hig	0.58	8.8	0.10	Jan 11, 2017	Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution.

CVE-2017-11259HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.13
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…
CVE-2017-11257HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11256HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when generating content using XFA layout engine. Successful exploitation could lead to arbitrary code…
CVE-2017-11254HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the Acrobat/Reader's JavaScript engine. Successful exploitation could lead to arbitrary code…
CVE-2017-11251HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 parsing module. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11241HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.15
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to polygons.…
CVE-2017-11237HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing module. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11235HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the image conversion engine when decompressing JPEG data. Successful exploitation could lead to…
CVE-2017-11234HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF data related to the way how the components of…
CVE-2017-11231HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in Acrobat/Reader rendering engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11229HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data Format (FDF).
CVE-2017-11228HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing JPEG 2000 (JP2) code stream data. Successful…
CVE-2017-11227HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…
CVE-2017-11226HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image processing engine when processing JPEG 2000 (JP2) code stream data. Successful…
CVE-2017-11224HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11223HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.10
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the core of the XFA engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11222HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) engine. Successful exploitation could lead to arbitrary…
CVE-2017-11221HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the annotation functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11220HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.15
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in an internal data structure. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11219HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA rendering engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11218HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.10
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in XFA event management. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11216HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11214HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11212HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text…
CVE-2017-3099HigJul 17, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.09
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3074HigMay 9, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.05
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3073HigMay 9, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.05
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory corruption. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3072HigMay 9, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.05
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3071HigMay 9, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.06
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3070HigMay 9, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.05
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3069HigMay 9, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.05
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3003HigMar 14, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.05
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3002HigMar 14, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.05
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3001HigMar 14, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.05
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2999HigMar 14, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.04
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2998HigMar 14, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.04
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2997HigMar 14, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.07
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2996HigFeb 15, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.05
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2995HigFeb 15, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.06
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2994HigFeb 15, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.06
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2993HigFeb 15, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.06
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2991HigFeb 15, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.09
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary code execution.
CVE-2017-2990HigFeb 15, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.10
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2987HigFeb 15, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.09
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2982HigFeb 15, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.58cvss 8.8epss 0.06
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2937HigJan 11, 2017
Adobe Inc.
Flashplayer
risk 0.58cvss 8.8epss 0.06
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class inheritance. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2936HigJan 11, 2017
Adobe Inc.
Flashplayer
risk 0.58cvss 8.8epss 0.06
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2928HigJan 11, 2017
Adobe Inc.
Flashplayer
risk 0.58cvss 8.8epss 0.05
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to setting visual mode effects. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2927HigJan 11, 2017
Adobe Inc.
Flashplayer
risk 0.58cvss 8.8epss 0.09
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2926HigJan 11, 2017
Adobe Inc.
Flashplayer
risk 0.58cvss 8.8epss 0.10
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution.

Page 23 of 154