DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2025-02-11
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen und einen Denial-of-Service-Zustand zu verursachen.
01
beschreibt (13)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-21163US | — | — | ||
Illustrator versions 29.1, 28.7.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curren… | ||||
| CVE-2025-21161US | — | — | ||
Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | ||||
| CVE-2025-21160US | — | — | ||
Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context o… | ||||
| CVE-2025-21159US | — | — | ||
Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Explo… | ||||
| CVE-2025-21156US | — | — | ||
InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the… | ||||
| CVE-2025-21155US | — | — | ||
Substance3D - Stager versions 3.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could ex… | ||||
| CVE-2025-21158US | — | — | ||
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the… | ||||
| CVE-2025-21157US | — | — | ||
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2025-21126US | — | — | ||
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. A… | ||||
| CVE-2025-21125US | — | — | ||
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker c… | ||||
| CVE-2025-21124US | — | — | ||
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leve… | ||||
| CVE-2025-21123US | — | — | ||
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2025-21121US | — | — | ||
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Security Bulletin APSB25-11 vom 2025-02-11external
- Adobe Security Bulletin APSB25-10 vom 2025-02-11external
- Adobe Security Bulletin APSB25-01 vom 2025-02-11external
- Adobe Security Bulletin APSB25-12 vom 2025-02-11external
- Adobe Security Bulletin APSB25-09 vom 2025-02-11external
- WID-SEC-W-2025-0338 - CSAF Versionself
- WID-SEC-2025-0338 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan