DeutschShown in its original language — a full translation is planned for a future version.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen ermöglichen Codeausführung
view advisory published 2025-01-14
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-21139US | — | — | ||
Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2025-21138US | — | — | ||
Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us… | ||||
| CVE-2025-21137US | — | — | ||
Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2025-21136US | — | — | ||
Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us… | ||||
| CVE-2025-21135US | — | — | ||
Animate versions 24.0.6, 23.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of… | ||||
| CVE-2025-21134US | — | — | ||
Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context… | ||||
| CVE-2025-21133US | — | — | ||
Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context… | ||||
| CVE-2025-21132US | — | — | ||
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2025-21131US | — | — | ||
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2025-21130US | — | — | ||
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2025-21129US | high7.8 | — | ||
Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curre… | ||||
| CVE-2025-21128US | — | — | ||
Substance3D - Stager versions 3.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
02
references
External citations — patches, advisories, analysis.
- Adobe Security Bulletin APSB25-05 vom 2025-01-14external
- Adobe Security Bulletin APSB25-04 vom 2025-01-14external
- Adobe Security Bulletin APSB25-06 vom 2025-01-14external
- Adobe Security Bulletin APSB25-03 vom 2025-01-14external
- WID-SEC-W-2025-0085 - CSAF Versionself
- WID-SEC-2025-0085 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan