DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2025-10-14
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.
01
beschreibt (23)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-54271US | — | — | ||
Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system wri… | ||||
| CVE-2025-54278US | — | — | ||
Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabil… | ||||
| CVE-2025-54268US | — | — | ||
Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us… | ||||
| CVE-2025-61804US | — | — | ||
Animate versions 23.0.13, 24.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current… | ||||
| CVE-2025-54279US | — | — | ||
Animate versions 23.0.13, 24.0.10 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Explo… | ||||
| CVE-2025-54270US | — | — | ||
Animate versions 23.0.13, 24.0.10 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabi… | ||||
| CVE-2025-54269US | — | — | ||
Animate versions 23.0.13, 24.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability… | ||||
| CVE-2025-61807US | — | — | ||
Substance3D - Stager versions 3.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the… | ||||
| CVE-2025-61806US | — | — | ||
Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an all… | ||||
| CVE-2025-61805US | — | — | ||
Substance3D - Stager versions 3.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an all… | ||||
| CVE-2025-61803US | — | — | ||
Substance3D - Stager versions 3.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the… | ||||
| CVE-2025-61802US | — | — | ||
Substance3D - Stager versions 3.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exp… | ||||
| CVE-2025-61801US | — | — | ||
Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o… | ||||
| CVE-2025-61800US | — | — | ||
Dimension versions 4.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2025-61799US | — | — | ||
Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memo… | ||||
| CVE-2025-61798US | — | — | ||
Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memo… | ||||
| CVE-2025-54284US | — | — | ||
Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.… | ||||
| CVE-2025-54283US | — | — | ||
Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.… | ||||
| CVE-2025-54276US | — | — | ||
Substance3D - Modeler versions 1.22.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an a… | ||||
| CVE-2025-54280US | — | — | ||
Substance3D - Viewer versions 0.25.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current us… | ||||
20 von 23 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Product Security Bulletin APSB25-97 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-96 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-95 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-103 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-102 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-100 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-99 vom 2025-10-14external
- Adobe Product Security Bulletin APSB25-104 vom 2025-10-14external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan