DeutschShown in its original language — a full translation is planned for a future version.
Adobe Creative Cloud: Mehrere Schwachstellen
view advisory published 2024-05-14
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.
01
describes (16)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-30309US | — | — | ||
Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could le… | ||||
| CVE-2024-30308US | — | — | ||
Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could le… | ||||
| CVE-2024-30307US | — | — | ||
Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us… | ||||
| CVE-2024-30298US | medium5.5 | — | ||
Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverag… | ||||
| CVE-2024-30297US | — | — | ||
Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. E… | ||||
| CVE-2024-30296US | — | — | ||
Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. E… | ||||
| CVE-2024-30295US | — | — | ||
Animate versions 24.0.2, 23.0.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2024-30294US | — | — | ||
Animate versions 24.0.2, 23.0.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-30293US | — | — | ||
Animate versions 24.0.2, 23.0.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current… | ||||
| CVE-2024-30282US | — | — | ||
Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. E… | ||||
| CVE-2024-30281US | — | — | ||
Substance3D - Designer versions 13.1.1 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could… | ||||
| CVE-2024-30275US | — | — | ||
Adobe Aero Desktop versions 23.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… | ||||
| CVE-2024-30274US | high7.8 | — | ||
Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us… | ||||
| CVE-2024-20793US | — | — | ||
Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this… | ||||
| CVE-2024-20792US | — | — | ||
Illustrator versions 28.4, 27.9.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Explo… | ||||
| CVE-2024-20791US | — | — | ||
Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an alloc… | ||||
02
references
External citations — patches, advisories, analysis.
- Adobe Security Bulletin vom 2024-05-14external
- Adobe Security Bulletin vom 2024-05-14external
- Adobe Security Bulletin vom 2024-05-14external
- Adobe Security Bulletin vom 2024-05-14external
- Adobe Security Bulletin vom 2024-05-14external
- WID-SEC-W-2024-1118 - CSAF Versionself
- WID-SEC-2024-1118 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan