DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-08-13
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu erzeugen.
01
beschreibt (36)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-52998US | — | — | ||
Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage th… | ||||
| CVE-2024-41866US | — | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attack… | ||||
| CVE-2024-41865US | — | — | ||
Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerabili… | ||||
| CVE-2024-41854US | medium5.5 | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leve… | ||||
| CVE-2024-41853US | — | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2024-41852US | — | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of t… | ||||
| CVE-2024-41851US | — | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context… | ||||
| CVE-2024-41850US | high7.8 | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2024-41840US | — | — | ||
Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Ex… | ||||
| CVE-2024-39395US | — | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attack… | ||||
| CVE-2024-39394US | high7.8 | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2024-39393US | — | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of… | ||||
| CVE-2024-39391US | — | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2024-39390US | — | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2024-39389US | — | — | ||
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of t… | ||||
| CVE-2024-39388US | high7.8 | — | ||
Substance3D - Stager versions 3.0.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exp… | ||||
| CVE-2024-39387US | — | — | ||
Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu… | ||||
| CVE-2024-39386US | — | — | ||
Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Ex… | ||||
| CVE-2024-34138US | — | — | ||
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could… | ||||
| CVE-2024-34137US | — | — | ||
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attac… | ||||
20 von 36 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Security Bulletin vom 2024-08-13external
- Adobe Security Bulletin vom 2024-08-13external
- Adobe Security Bulletin vom 2024-08-13external
- Adobe Security Bulletin vom 2024-08-13external
- Adobe Security Bulletin vom 2024-08-13external
- Adobe Security Bulletin vom 2024-08-13external
- Adobe Security Bulletin vom 2024-08-13external
- WID-SEC-W-2024-1852 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan