DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-11-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.
01
beschreibt (48)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-44347US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vu… | ||||
| CVE-2023-44346US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… | ||||
| CVE-2023-44345US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a Improper Input Validation vulnerability. An unauthenticated attacker could leverage this v… | ||||
| CVE-2023-44344US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… | ||||
| CVE-2023-44343US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… | ||||
| CVE-2023-44342US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… | ||||
| CVE-2023-44341US | — | — | ||
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vu… | ||||
| CVE-2023-44355US | — | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.… | ||||
| CVE-2023-44353US | — | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code exec… | ||||
| CVE-2023-44352US | medium6.1 | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is abl… | ||||
| CVE-2023-44351US | — | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code exec… | ||||
| CVE-2023-44350US | — | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code exec… | ||||
| CVE-2023-26347US | — | — | ||
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An… | ||||
| CVE-2023-44324US | — | — | ||
Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An unauthentic… | ||||
| CVE-2023-47073US | high7.8 | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… | ||||
| CVE-2023-47072US | low3.3 | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive… | ||||
| CVE-2023-47071US | — | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An at… | ||||
| CVE-2023-47070US | high7.8 | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… | ||||
| CVE-2023-47069US | high7.8 | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a rea… | ||||
| CVE-2023-47068US | high7.8 | — | ||
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a rea… | ||||
20 von 48 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Security Bulletin APSB23-66 vom 2023-11-14external
- Adobe Security Bulletin APSB23-61 vom 2023-11-14external
- Adobe Security Bulletin APSB23-64 vom 2023-11-14external
- Adobe Security Bulletin APSB23-57 vom 2023-11-14external
- Adobe Security Bulletin APSB23-52 vom 2023-11-14external
- Adobe Security Bulletin APSB23-62 vom 2023-11-14external
- Adobe Security Bulletin APSB23-58 vom 2023-11-14external
- Adobe Security Bulletin APSB23-60 vom 2023-11-14external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan