Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-36025 State: PUBLISHED Published: 2021-09-01T14:31:02.108466Z Last Updated: 2024-09-17T00:21:57.230Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability while saving a customer's details with a specially crafted file. An authenticated attacker with admin privileges can leverage this vulnerability to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/
emote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36026 State: PUBLISHED Published: 2021-09-01T14:29:48.434043Z Last Updated: 2024-09-17T03:48:19.424Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-79 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a stored cross-site scripting vulnerability in the customer address upload feature that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes:
e executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36027 State: PUBLISHED Published: 2021-09-01T14:32:00.605315Z Last Updated: 2024-09-16T20:47:32.807Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-79 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a stored cross-site scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: -
hey browse to the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36028 State: PUBLISHED Published: 2021-09-01T14:28:56.481294Z Last Updated: 2024-09-16T23:20:58.433Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-91 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability when saving a configurable product. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36029 State: PUBLISHED Published: 2021-09-01T14:29:55.051477Z Last Updated: 2024-09-16T19:46:09.476Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-285 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36030 State: PUBLISHED Published: 2021-09-01T14:31:19.323871Z Last Updated: 2024-09-17T03:39:08.695Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36031 State: PUBLISHED Published: 2021-09-01T14:30:35.018817Z Last Updated: 2024-09-17T03:02:41.318Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-22 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a Path Traversal vulnerability via the `theme[preview_image]` parameter. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36032 State: PUBLISHED Published: 2021-09-01T14:29:40.817356Z Last Updated: 2024-09-17T02:56:51.003Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the `V1/customers/me` endpoint to achieve information exposure and privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento
tion. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36033 State: PUBLISHED Published: 2021-09-01T14:28:30.908518Z Last Updated: 2024-09-16T23:21:27.087Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-91 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36034 State: PUBLISHED Published: 2021-09-01T14:28:46.348481Z Last Updated: 2024-09-16T16:42:50.203Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36035 State: PUBLISHED Published: 2021-09-01T14:30:48.954216Z Last Updated: 2024-09-16T23:31:45.667Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges could make a crafted request to the Adobe Stock API to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36036 State: PUBLISHED Published: 2023-09-06T13:08:11.318Z Last Updated: 2025-02-27T21:00:40.727Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-284 Description: Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper access control vulnerability within Magento's Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privilege can gain access to delete the .htaccess file. This could result in the attacker achieving remote code execution. Additional Analyst
ess to delete the .htaccess file. This could result in the attacker achieving remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36037 State: PUBLISHED Published: 2021-09-01T14:28:24.437134Z Last Updated: 2024-09-17T03:44:08.440Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-285 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An authenticated attacker could leverage this vulnerability to achieve sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36038 State: PUBLISHED Published: 2021-09-01T14:29:34.101278Z Last Updated: 2024-09-16T20:28:00.196Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the Multishipping Module. An authenticated attacker could leverage this vulnerability to achieve sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36039 State: PUBLISHED Published: 2021-09-01T14:30:01.556748Z Last Updated: 2024-09-16T23:21:57.769Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-863 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability via the `quoteId` parameter. An attacker can abuse this vulnerability to disclose sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36040 State: PUBLISHED Published: 2021-09-01T14:31:07.265053Z Last Updated: 2024-09-17T01:35:35.057Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to bypass file extension restrictions and could lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.ht
nal Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36041 State: PUBLISHED Published: 2021-09-01T14:31:14.142861Z Last Updated: 2024-09-17T04:04:02.207Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges could upload a specially crafted file in the 'pub/media` directory could lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36042 State: PUBLISHED Published: 2021-09-01T14:31:24.882861Z Last Updated: 2024-09-17T01:25:59.655Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the API File Option Upload Extension. An attacker with Admin privileges can achieve unrestricted file upload which can result in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-
ditional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36043 State: PUBLISHED Published: 2021-09-01T14:31:38.272830Z Last Updated: 2024-09-16T20:36:46.572Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-918 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a blind SSRF vulnerability in the bundled dotmailer extension. An attacker with admin privileges could abuse this to achieve remote code execution should Redis be enabled. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36044 State: PUBLISHED Published: 2021-09-01T14:32:31.895533Z Last Updated: 2024-09-16T19:57:02.192Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-20 Description: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An unauthenticated attacker could abuse this vulnerability to cause a server-side denial-of-service using a GraphQL field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-64.html
CVE ID: CVE-2021-36045 State: PUBLISHED Published: 2021-09-01T14:32:09.989Z Last Updated: 2025-11-03T19:25:52.219Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-125 Description: XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcor
file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-36046 State: PUBLISHED Published: 2021-09-01T14:31:32.972Z Last Updated: 2025-11-03T19:25:53.596Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-788 Description: XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-36047 State: PUBLISHED Published: 2021-09-01T14:32:20.526Z Last Updated: 2025-11-03T19:25:54.971Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-20 Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-ann
References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-36048 State: PUBLISHED Published: 2021-09-01T14:32:26.143Z Last Updated: 2025-11-03T19:25:56.338Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-20 Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-ann
CVE ID: CVE-2021-36049 State: PUBLISHED Published: 2021-09-01T14:32:15.776Z Last Updated: 2025-04-23T19:31:20.279Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-69.html
CVE ID: CVE-2021-36050 State: PUBLISHED Published: 2021-09-01T14:32:36.956Z Last Updated: 2025-11-03T19:25:57.711Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-122 Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/2023
: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-36051 State: PUBLISHED Published: 2021-10-04T13:29:31.262Z Last Updated: 2025-11-03T19:25:59.082Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-122 Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lt
ner: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-36052 State: PUBLISHED Published: 2021-09-01T14:32:49.747Z Last Updated: 2025-11-03T19:26:00.490Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-788 Description: XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-36053 State: PUBLISHED Published: 2021-09-01T14:32:44.581Z Last Updated: 2025-11-03T19:26:01.934Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-125 Description: XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcor
CVE ID: CVE-2021-36054 State: PUBLISHED Published: 2021-09-01T14:33:25.926Z Last Updated: 2025-11-03T19:26:03.358Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-122 Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-ann
CVE ID: CVE-2021-36055 State: PUBLISHED Published: 2021-09-01T14:32:55.748Z Last Updated: 2025-11-03T19:26:04.735Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-416 Description: XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-
r: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-36056 State: PUBLISHED Published: 2021-09-01T14:33:39.380Z Last Updated: 2025-11-03T19:26:06.117Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-122 Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/20
es: - https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html