DeutschShown in its original language — a full translation is planned for a future version.
Adobe Creative Cloud: Mehrere Schwachstellen
view advisory published 2023-11-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.
01
describes (48)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-44347US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vu… | ||||
| CVE-2023-44346US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… | ||||
| CVE-2023-44345US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a Improper Input Validation vulnerability. An unauthenticated attacker could leverage this v… | ||||
| CVE-2023-44344US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… | ||||
| CVE-2023-44343US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… | ||||
| CVE-2023-44342US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… | ||||
| CVE-2023-44341US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vu… | ||||
| CVE-2023-44355US | — | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.… | ||||
| CVE-2023-44353US | — | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code exec… | ||||
| CVE-2023-44352US | medium6.1 | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is abl… | ||||
| CVE-2023-44351US | — | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code exec… | ||||
| CVE-2023-44350US | — | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code exec… | ||||
| CVE-2023-26347US | — | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An… | ||||
| CVE-2023-44324US | — | — | ||
Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An unauthentic… | ||||
| CVE-2023-47073US | high7.8 | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… | ||||
| CVE-2023-47072US | low3.3 | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive… | ||||
| CVE-2023-47071US | — | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… | ||||
| CVE-2023-47070US | high7.8 | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… | ||||
| CVE-2023-47069US | high7.8 | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a rea… | ||||
| CVE-2023-47068US | high7.8 | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a rea… | ||||
showing 20 of 48
02
references
External citations — patches, advisories, analysis.
- Adobe Security Bulletin APSB23-66 vom 2023-11-14external
- Adobe Security Bulletin APSB23-61 vom 2023-11-14external
- Adobe Security Bulletin APSB23-64 vom 2023-11-14external
- Adobe Security Bulletin APSB23-57 vom 2023-11-14external
- Adobe Security Bulletin APSB23-52 vom 2023-11-14external
- Adobe Security Bulletin APSB23-62 vom 2023-11-14external
- Adobe Security Bulletin APSB23-58 vom 2023-11-14external
- Adobe Security Bulletin APSB23-60 vom 2023-11-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan