DeutschShown in its original language — a full translation is planned for a future version.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
view advisory published 2025-10-14
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.
01
describes (23)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-54271US | — | — | ||
Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system wri… | ||||
| CVE-2025-54278US | — | — | ||
Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabil… | ||||
| CVE-2025-54268US | — | — | ||
Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us… | ||||
| CVE-2025-61804US | — | — | ||
Animate versions 23.0.13, 24.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current… | ||||
| CVE-2025-54279US | — | — | ||
Animate versions 23.0.13, 24.0.10 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Explo… | ||||
| CVE-2025-54270US | — | — | ||
Animate versions 23.0.13, 24.0.10 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabi… | ||||
| CVE-2025-54269US | — | — | ||
Animate versions 23.0.13, 24.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability… | ||||
| CVE-2025-61807US | — | — | ||
Substance3D - Stager versions 3.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the… | ||||
| CVE-2025-61806US | — | — | ||
Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an all… | ||||
| CVE-2025-61805US | — | — | ||
Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an all… | ||||
| CVE-2025-61803US | — | — | ||
Substance3D - Stager versions 3.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the… | ||||
| CVE-2025-61802US | — | — | ||
Substance3D - Stager versions 3.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exp… | ||||
| CVE-2025-61801US | — | — | ||
Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o… | ||||
| CVE-2025-61800US | — | — | ||
Dimension versions 4.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2025-61799US | — | — | ||
Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memo… | ||||
| CVE-2025-61798US | — | — | ||
Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memo… | ||||
| CVE-2025-54284US | — | — | ||
Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.… | ||||
| CVE-2025-54283US | — | — | ||
Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.… | ||||
| CVE-2025-54276US | — | — | ||
Substance3D - Modeler versions 1.22.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an a… | ||||
| CVE-2025-54280US | — | — | ||
Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us… | ||||
showing 20 of 23
02
references
External citations — patches, advisories, analysis.
- Adobe Product Security Bulletin APSB25-97 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-96 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-95 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-103 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-102 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-100 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-99 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-104 vom 2025-10-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan