Adobe

Zero Day Initiative advisories Adobe Jul 15

ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud Desktop Application. An attacker must firs...

T1548 T1068 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jul 15

ZDI-26-419: Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud. An attacker must first obtain the ability...

T1548 T1068 1 IOC

Zero Day Initiative → Details

Infosecurity Magazine general Adobe Jul 7

Hackers Exploit Maximum Severity Adobe ColdFusion Flaw

Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.

Infosecurity Magazine → Details

Zero Day Initiative advisories Adobe Jun 24

ZDI-26-361: Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 10

ZDI-26-355: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-354: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-353: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-352: Adobe Acrobat Pro DC AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to explo...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-351: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD libr...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-350: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD libr...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-349: Adobe Acrobat Pro DC Annots.api Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to explo...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-348: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-347: Adobe Acrobat Reader DC Multimedia Rendition Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-346: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is requir...

1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-345: Adobe Acrobat Reader DC Font Handling Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-344: Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is requir...

1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Jun 9

ZDI-26-343: Adobe Acrobat Reader DC TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to ex...

T1190 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Apr 15

ZDI-26-264: Adobe ColdFusion fetchCFSettingFile Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe ColdFusion. Authentication is not required to...

1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Apr 15

ZDI-26-263: Adobe ColdFusion subscribeToEndpoints Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Adobe ColdFusion. Authentication is not required to exploit ...

T1556 1 IOC

Zero Day Initiative → Details

Zero Day Initiative advisories Adobe Apr 15

ZDI-26-262: Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Adobe ColdFusion. Although authentication is required to ex...

1 IOC

Zero Day Initiative → Details