DeutschShown in its original language — a full translation is planned for a future version.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
view advisory published 2025-03-11
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.
01
describes (30)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-27181US | — | — | ||
Substance3D - Modeler versions 1.15.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. E… | ||||
| CVE-2025-27180US | — | — | ||
Substance3D - Modeler versions 1.15.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… | ||||
| CVE-2025-27173US | — | — | ||
Substance3D - Modeler versions 1.15.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur… | ||||
| CVE-2025-21170US | — | — | ||
Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could… | ||||
| CVE-2025-27179US | — | — | ||
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker c… | ||||
| CVE-2025-27178US | — | — | ||
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2025-27177US | — | — | ||
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2025-27176US | — | — | ||
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker c… | ||||
| CVE-2025-27175US | — | — | ||
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2025-27171US | — | — | ||
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2025-27170US | — | — | ||
Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could ex… | ||||
| CVE-2025-27169US | — | — | ||
Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2025-27168US | — | — | ||
Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2025-27167US | — | — | ||
Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized… | ||||
| CVE-2025-27166US | — | — | ||
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2025-24453US | — | — | ||
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2025-24452US | — | — | ||
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2025-24451US | — | — | ||
Substance3D - Painter versions 10.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2025-24450US | — | — | ||
Substance3D - Painter versions 10.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2025-24449US | — | — | ||
Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th… | ||||
showing 20 of 30
02
references
External citations — patches, advisories, analysis.
- Adobe Security Bulletin APSB25-17 vom 2025-03-11external
- Adobe Security Bulletin APSB25-19 vom 2025-03-11external
- Adobe Security Bulletin APSB25-21 vom 2025-03-11external
- Adobe Security Bulletin APSB25-16 vom 2025-03-11external
- Adobe Security Bulletin APSB25-22 vom 2025-03-11external
- Adobe Security Bulletin APSB25-18 vom 2025-03-11external
- WID-SEC-W-2025-0535 - CSAF Versionself
- WID-SEC-2025-0535 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan