Vendor CVEs

Adobe Inc.

All CVEs

7,663 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-27790	Adobe Inc. Acrobat	Hig	0.52	7.8	0.12	May 11, 2022	Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user.…
CVE-2022-27787	Adobe Inc. Acrobat	Hig	0.52	7.8	0.11	May 11, 2022	Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2022-27786	Adobe Inc. Acrobat	Hig	0.52	7.8	0.12	May 11, 2022	Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user.…
CVE-2022-27785	Adobe Inc. Acrobat	Hig	0.52	7.8	0.13	May 11, 2022	Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user.…
CVE-2022-24104	Adobe Inc. Acrobat	Hig	0.52	7.8	0.11	May 11, 2022	Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires…
CVE-2022-24102	Adobe Inc. Acrobat	Hig	0.52	7.8	0.13	May 11, 2022	Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires…
CVE-2021-45068	Adobe Inc. Acrobat	Hig	0.52	7.8	0.12	Jan 14, 2022	Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2021-45064	Adobe Inc. Acrobat	Hig	0.52	7.8	0.12	Jan 14, 2022	Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current…
CVE-2021-45062	Adobe Inc. Acrobat	Hig	0.52	7.8	0.17	Jan 14, 2022	Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current…
CVE-2021-44710	Adobe Inc. Acrobat	Hig	0.52	7.8	0.12	Jan 14, 2022	Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current…
CVE-2021-44704	Adobe Inc. Acrobat	Hig	0.52	7.8	0.11	Jan 14, 2022	Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current…
CVE-2021-44701	Adobe Inc. Acrobat	Hig	0.52	7.8	0.21	Jan 14, 2022	Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current…
CVE-2021-43764	Adobe Inc. Aem	Hig	0.52	8.0	0.02	Jan 13, 2022	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a…
CVE-2021-43761	Adobe Inc. Aem	Hig	0.52	8.0	0.01	Jan 13, 2022	AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.…
CVE-2021-39863	Adobe Inc. Acrobat	Hig	0.52	7.8	0.13	Sep 29, 2021	Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to…
CVE-2021-39842	Adobe Inc. Acrobat	Hig	0.52	7.8	0.17	Sep 29, 2021	Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2021-39841	Adobe Inc. Acrobat	Hig	0.52	7.8	0.12	Sep 29, 2021	Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Type Confusion vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current user.…
CVE-2021-36043	Adobe Inc. Commerce	Hig	0.52	8.0	0.02	Sep 1, 2021	Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a blind SSRF vulnerability in the bundled dotmailer extension. An attacker with admin privileges could abuse this to achieve remote code execution should Redis be…
CVE-2021-28640	Adobe Inc. Acrobat	Hig	0.52	7.3	0.52	Aug 20, 2021	Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context…
CVE-2021-21056	Adobe Inc. Framemaker	Hig	0.52	7.8	0.21	Mar 12, 2021	Adobe Framemaker version 2020.0.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user.…
CVE-2021-21014	Magento Magento	Cri	0.52	9.1	0.04	Feb 11, 2021	Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for…
CVE-2020-24436	Adobe Inc. Acrobat	Hig	0.52	7.8	0.17	Nov 5, 2020	Acrobat Pro DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds write vulnerability that could result in writing past the end of an allocated memory structure. An attacker could leverage this…
CVE-2020-24433	Adobe Inc. Acrobat	Hig	0.52	7.8	0.16	Nov 5, 2020	Adobe Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a local privilege escalation vulnerability that could enable a user without administrator privileges to delete arbitrary files and…
CVE-2020-24430	Adobe Inc. Acrobat	Hig	0.52	7.8	0.19	Nov 5, 2020	Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability when handling malicious JavaScript. This vulnerability could result in arbitrary code execution in the context of…
CVE-2020-9731	Adobe Inc. Indesign	Hig	0.52	7.8	0.11	Sep 10, 2020	A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.
CVE-2019-7089	Adobe Inc. Acrobat	Hig	0.52	7.5	0.45	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a data leakage (sensitive) vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-15955	Adobe Inc. Acrobat	Hig	0.52	7.8	0.19	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15954	Adobe Inc. Acrobat	Hig	0.52	7.8	0.19	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15952	Adobe Inc. Acrobat	Hig	0.52	7.8	0.15	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15938	Adobe Inc. Acrobat	Hig	0.52	7.8	0.14	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15936	Adobe Inc. Acrobat	Hig	0.52	7.8	0.14	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15935	Adobe Inc. Acrobat	Hig	0.52	7.8	0.14	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15934	Adobe Inc. Acrobat	Hig	0.52	7.8	0.13	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15933	Adobe Inc. Acrobat	Hig	0.52	7.8	0.13	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15929	Adobe Inc. Acrobat	Hig	0.52	7.8	0.13	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15928	Adobe Inc. Acrobat	Hig	0.52	7.8	0.16	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12865	Adobe Inc. Acrobat	Hig	0.52	7.8	0.16	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12864	Adobe Inc. Acrobat	Hig	0.52	7.8	0.16	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12863	Adobe Inc. Acrobat	Hig	0.52	7.8	0.17	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12862	Adobe Inc. Acrobat	Hig	0.52	7.8	0.13	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12861	Adobe Inc. Acrobat	Hig	0.52	7.8	0.16	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12860	Adobe Inc. Acrobat	Hig	0.52	7.8	0.13	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12851	Adobe Inc. Acrobat	Hig	0.52	7.8	0.10	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12847	Adobe Inc. Acrobat	Hig	0.52	7.8	0.11	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12837	Adobe Inc. Acrobat	Hig	0.52	7.8	0.10	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12836	Adobe Inc. Acrobat	Hig	0.52	7.8	0.10	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12833	Adobe Inc. Acrobat	Hig	0.52	7.8	0.10	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12832	Adobe Inc. Acrobat	Hig	0.52	7.8	0.10	Oct 12, 2018	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-4985	Adobe Inc. Acrobat	Hig	0.52	7.5	0.37	Jul 9, 2018	Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-4956	Adobe Inc. Acrobat	Hig	0.52	7.5	0.33	Jul 9, 2018	Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

CVE-2022-27790HigMay 11, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.12
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user.…
CVE-2022-27787HigMay 11, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.11
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2022-27786HigMay 11, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.12
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user.…
CVE-2022-27785HigMay 11, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.13
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the current user.…
CVE-2022-24104HigMay 11, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.11
Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires…
CVE-2022-24102HigMay 11, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.13
Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires…
CVE-2021-45068HigJan 14, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.12
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2021-45064HigJan 14, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.12
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current…
CVE-2021-45062HigJan 14, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.17
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current…
CVE-2021-44710HigJan 14, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.12
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current…
CVE-2021-44704HigJan 14, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.11
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current…
CVE-2021-44701HigJan 14, 2022
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.21
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current…
CVE-2021-43764HigJan 13, 2022
Adobe Inc.
Aem
risk 0.52cvss 8.0epss 0.02
AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a…
CVE-2021-43761HigJan 13, 2022
Adobe Inc.
Aem
risk 0.52cvss 8.0epss 0.01
AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.…
CVE-2021-39863HigSep 29, 2021
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.13
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to…
CVE-2021-39842HigSep 29, 2021
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.17
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2021-39841HigSep 29, 2021
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.12
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Type Confusion vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current user.…
CVE-2021-36043HigSep 1, 2021
Adobe Inc.
Commerce
risk 0.52cvss 8.0epss 0.02
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a blind SSRF vulnerability in the bundled dotmailer extension. An attacker with admin privileges could abuse this to achieve remote code execution should Redis be…
CVE-2021-28640HigAug 20, 2021
Adobe Inc.
Acrobat
risk 0.52cvss 7.3epss 0.52
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context…
CVE-2021-21056HigMar 12, 2021
Adobe Inc.
Framemaker
risk 0.52cvss 7.8epss 0.21
Adobe Framemaker version 2020.0.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user.…
CVE-2021-21014CriFeb 11, 2021
Magento
Magento
risk 0.52cvss 9.1epss 0.04
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for…
CVE-2020-24436HigNov 5, 2020
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.17
Acrobat Pro DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds write vulnerability that could result in writing past the end of an allocated memory structure. An attacker could leverage this…
CVE-2020-24433HigNov 5, 2020
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.16
Adobe Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a local privilege escalation vulnerability that could enable a user without administrator privileges to delete arbitrary files and…
CVE-2020-24430HigNov 5, 2020
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.19
Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability when handling malicious JavaScript. This vulnerability could result in arbitrary code execution in the context of…
CVE-2020-9731HigSep 10, 2020
Adobe Inc.
Indesign
risk 0.52cvss 7.8epss 0.11
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.
CVE-2019-7089HigMay 24, 2019
Adobe Inc.
Acrobat
risk 0.52cvss 7.5epss 0.45
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a data leakage (sensitive) vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-15955HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.19
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15954HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.19
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15952HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.15
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15938HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.14
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15936HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.14
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15935HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.14
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15934HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.13
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15933HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.13
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15929HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.13
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15928HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.16
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12865HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.16
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12864HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.16
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12863HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.17
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12862HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.13
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12861HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.16
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12860HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.13
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12851HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.10
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12847HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.11
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12837HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.10
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12836HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.10
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12833HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.10
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-12832HigOct 12, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.8epss 0.10
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-4985HigJul 9, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.5epss 0.37
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-4956HigJul 9, 2018
Adobe Inc.
Acrobat
risk 0.52cvss 7.5epss 0.33
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Page 33 of 154