InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires us...
AFFECTED_PRODUCTS:
Adobe Acrobat Reader,
Adobe Acrobat,
Adobe Acrobat
... (+2)
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires us...
AFFECTED_PRODUCTS:
Adobe Acrobat Reader,
Adobe Acrobat,
Adobe Acrobat
... (+2)
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o...
AFFECTED_PRODUCTS:
Adobe Acrobat Reader,
Adobe Acrobat,
Adobe Acrobat
... (+2)
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in t...
AFFECTED_PRODUCTS:
Adobe Acrobat Reader,
Adobe Acrobat,
Adobe Acrobat
... (+2)
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...
AFFECTED_PRODUCTS:
Adobe Acrobat Reader,
Adobe Acrobat,
Adobe Acrobat
... (+2)
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi...
AFFECTED_PRODUCTS:
Adobe Acrobat Reader,
Adobe Acrobat,
Adobe Acrobat
... (+2)
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o...
AFFECTED_PRODUCTS:
Adobe Acrobat Reader,
Adobe Acrobat,
Adobe Acrobat
... (+2)
An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use of Sudo to root, and sensitive data exposure. This is fixed in PMM2 2.42.0-1.ova, 2.43.0-1.ova, 2.43.1-1.ova, 2.43.2-1.ova, and 2.44.0-1.ova and in PMM3 3.0.0-1...
An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength policies.
AFFECTED_PRODUCTS:
Digitaldruid Hoteldruid
A CSRF vulnerability in the gestione_utenti.php endpoint of HotelDruid 3.0.7 allows attackers to perform unauthorized actions (e.g., modifying user passwords) on behalf of authenticated users by exploiting the lack of origin or referrer validation and the absence of CSRF tokens. NOTE: this is disput...
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
Substance3D - Painter versions 10.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Painter
Substance3D - Painter versions 10.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Painter
Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...
AFFECTED_PRODUCTS:
Adobe Illustrator,
Adobe Illustrator
Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...
AFFECTED_PRODUCTS:
Adobe Illustrator,
Adobe Illustrator
Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Sampler
Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Sampler
Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Sampler
Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Sampler
Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Sampler
Substance3D - Sampler versions 4.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Sampler
Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Sampler
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires us...
AFFECTED_PRODUCTS:
Adobe Acrobat Reader,
Adobe Acrobat,
Adobe Acrobat
... (+2)
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Malici...
AFFECTED_PRODUCTS:
Apple macOS,
Apple Safari,
Apple Iphone Os
... (+7)
Use after free in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via network access.
Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access.
AFFECTED_PRODUCTS:
Zoom Meeting Software Development Kit,
Zoom Workplace
The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POST request to the TinyMCE module
AFFECTED_PRODUCTS:
Abocms Abo.cms
Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Substance 3d Designer
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2016,
Microsoft Windows Server 2019
... (+17)
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+9)
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows 10 1507
... (+20)
Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Visual Studio Code
Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Access,
Microsoft Office Long Term Servicing Channel
... (+1)
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Office Long Term Servicing Channel
Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows Server 2022
... (+2)
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Visual Studio 2019,
Microsoft Visual Studio 2022,
Microsoft Visual Studio 2022
... (+2)
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Visual Studio 2017,
Microsoft Visual Studio 2019,
Microsoft Visual Studio 2022
... (+3)
Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022,
Microsoft Windows 10 21h2,
Microsoft Windows 10 22h2
... (+5)
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+10)
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
AFFECTED_PRODUCTS:
Microsoft Windows 11 22h2,
Microsoft Windows 11 23h2,
Microsoft Windows 11 24h2
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows 10 1507
... (+20)
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+13)
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows 10 1507
... (+20)
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+15)
Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network.
AFFECTED_PRODUCTS:
Microsoft Azure Promptflow Core,
Microsoft Azure Promptflow Tools