Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-34189 State: PUBLISHED Published: 2022-06-22T14:41:20 Last Updated: 2024-08-03T08:16:17.260Z Vendors: Jenkins project Products: Jenkins Image Tag Parameter Plugin Description: Jenkins Image Tag Parameter Plugin 1.10 and earlier does not escape the name and description of Image Tag parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34190 State: PUBLISHED Published: 2022-06-22T14:41:21 Last Updated: 2024-08-03T08:16:17.230Z Vendors: Jenkins project Products: Jenkins Maven Metadata Plugin for Jenkins CI server Plugin Description: Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.1 and earlier does not escape the name and description of List maven artifact versions parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34191 State: PUBLISHED Published: 2022-06-22T14:41:23 Last Updated: 2024-08-03T08:16:17.227Z Vendors: Jenkins project Products: Jenkins NS-ND Integration Performance Publisher Plugin Description: Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34192 State: PUBLISHED Published: 2022-06-22T14:41:24 Last Updated: 2024-08-03T08:16:17.284Z Vendors: Jenkins project Products: Jenkins ontrack Jenkins Plugin Description: Jenkins ontrack Jenkins Plugin 4.0.0 and earlier does not escape the name of Ontrack: Multi Parameter choice, Ontrack: Parameter choice, and Ontrack: SingleParameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34193 State: PUBLISHED Published: 2022-06-22T14:41:26 Last Updated: 2024-08-03T08:16:17.224Z Vendors: Jenkins project Products: Jenkins Package Version Plugin Description: Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34194 State: PUBLISHED Published: 2022-06-22T14:41:27 Last Updated: 2024-08-03T08:16:17.227Z Vendors: Jenkins project Products: Jenkins Readonly Parameter Plugin Description: Jenkins Readonly Parameter Plugin 1.0.0 and earlier does not escape the name and description of Readonly String and Readonly Text parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34195 State: PUBLISHED Published: 2022-06-22T14:41:29 Last Updated: 2024-08-03T08:16:17.285Z Vendors: Jenkins project Products: Jenkins Repository Connector Plugin Description: Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34196 State: PUBLISHED Published: 2022-06-22T14:41:30 Last Updated: 2024-08-03T08:16:17.281Z Vendors: Jenkins project Products: Jenkins REST List Parameter Plugin Description: Jenkins REST List Parameter Plugin 1.5.2 and earlier does not escape the name and description of REST list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34197 State: PUBLISHED Published: 2022-06-22T14:41:32 Last Updated: 2024-08-03T08:16:17.223Z Vendors: Jenkins project Products: Jenkins Sauce OnDemand Plugin Description: Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34198 State: PUBLISHED Published: 2022-06-22T14:41:33 Last Updated: 2024-08-03T08:16:17.307Z Vendors: Jenkins project Products: Jenkins Stash Branch Parameter Plugin Description: Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier does not escape the name and description of Stash Branch parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784
CVE ID: CVE-2022-34199 State: PUBLISHED Published: 2022-06-22T14:41:35 Last Updated: 2024-08-03T08:16:17.279Z Vendors: Jenkins project Products: Jenkins Convertigo Mobile Platform Plugin Description: Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2064
CVE ID: CVE-2022-34200 State: PUBLISHED Published: 2022-06-22T14:41:37 Last Updated: 2024-08-03T08:16:17.238Z Vendors: Jenkins project Products: Jenkins Convertigo Mobile Platform Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2276
CVE ID: CVE-2022-34201 State: PUBLISHED Published: 2022-06-22T14:41:38 Last Updated: 2024-08-03T08:16:17.235Z Vendors: Jenkins project Products: Jenkins Convertigo Mobile Platform Plugin Description: A missing permission check in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2276
CVE ID: CVE-2022-34202 State: PUBLISHED Published: 2022-06-22T14:41:40 Last Updated: 2024-08-03T08:16:17.220Z Vendors: Jenkins project Products: Jenkins EasyQA Plugin Description: Jenkins EasyQA Plugin 1.0 and earlier stores user passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2066
CVE ID: CVE-2022-34203 State: PUBLISHED Published: 2022-06-22T14:41:41 Last Updated: 2024-08-03T08:16:17.206Z Vendors: Jenkins project Products: Jenkins EasyQA Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins EasyQA Plugin 1.0 and earlier allows attackers to connect to an attacker-specified HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2281
CVE ID: CVE-2022-34204 State: PUBLISHED Published: 2022-06-22T14:41:43 Last Updated: 2024-08-03T08:16:17.277Z Vendors: Jenkins project Products: Jenkins EasyQA Plugin Description: A missing permission check in Jenkins EasyQA Plugin 1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2281
CVE ID: CVE-2022-34205 State: PUBLISHED Published: 2022-06-22T14:41:45 Last Updated: 2024-08-03T08:16:17.282Z Vendors: Jenkins project Products: Jenkins Jianliao Notification Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers to send HTTP POST requests to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2240
CVE ID: CVE-2022-34206 State: PUBLISHED Published: 2022-06-22T14:41:47 Last Updated: 2024-08-03T08:16:17.219Z Vendors: Jenkins project Products: Jenkins Jianliao Notification Plugin Description: A missing permission check in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers with Overall/Read permission to send HTTP POST requests to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2240
CVE ID: CVE-2022-34207 State: PUBLISHED Published: 2022-06-22T14:41:48 Last Updated: 2024-08-03T08:16:17.210Z Vendors: Jenkins project Products: Jenkins Beaker builder Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Beaker builder Plugin 1.10 and earlier allows attackers to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2248
CVE ID: CVE-2022-34208 State: PUBLISHED Published: 2022-06-22T14:41:50 Last Updated: 2024-08-03T08:16:17.210Z Vendors: Jenkins project Products: Jenkins Beaker builder Plugin Description: A missing permission check in Jenkins Beaker builder Plugin 1.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2248
CVE ID: CVE-2022-34209 State: PUBLISHED Published: 2022-06-22T14:41:51 Last Updated: 2024-08-03T08:16:17.286Z Vendors: Jenkins project Products: Jenkins ThreadFix Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2249
CVE ID: CVE-2022-34210 State: PUBLISHED Published: 2022-06-22T14:41:53 Last Updated: 2024-08-03T08:16:17.284Z Vendors: Jenkins project Products: Jenkins ThreadFix Plugin Description: A missing permission check in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2249
CVE ID: CVE-2022-34211 State: PUBLISHED Published: 2022-06-22T14:41:55 Last Updated: 2024-08-03T08:16:17.279Z Vendors: Jenkins project Products: Jenkins vRealize Orchestrator Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers to send an HTTP POST request to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2279
CVE ID: CVE-2022-34212 State: PUBLISHED Published: 2022-06-22T14:41:56 Last Updated: 2024-08-03T08:16:17.282Z Vendors: Jenkins project Products: Jenkins vRealize Orchestrator Plugin Description: A missing permission check in Jenkins vRealize Orchestrator Plugin 3.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2279
CVE ID: CVE-2022-34213 State: PUBLISHED Published: 2022-06-22T14:41:57 Last Updated: 2024-08-03T08:16:17.312Z Vendors: Jenkins project Products: Jenkins Squash TM Publisher (Squash4Jenkins) Plugin Description: Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2089
CVE ID: CVE-2022-34215 State: PUBLISHED Published: 2022-07-15T15:33:29.800Z Last Updated: 2025-04-23T18:01:37.587Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a vict
to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-32.html
CVE ID: CVE-2022-34216 State: PUBLISHED Published: 2022-07-15T15:33:10.566859Z Last Updated: 2024-09-17T00:00:52.218Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/sec
must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-32.html
CVE ID: CVE-2022-34217 State: PUBLISHED Published: 2022-07-15T15:33:45.727Z Last Updated: 2025-04-23T18:01:31.537Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
im must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-32.html
CVE ID: CVE-2022-34218 State: PUBLISHED Published: 2022-09-16T17:45:38.066Z Last Updated: 2025-04-23T17:05:11.327Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
CVE ID: CVE-2022-34219 State: PUBLISHED Published: 2022-07-15T15:33:52.433943Z Last Updated: 2024-09-17T03:48:50.227Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-34220 State: PUBLISHED Published: 2022-07-15T15:33:40.388709Z Last Updated: 2024-09-17T02:16:25.504Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-34221 State: PUBLISHED Published: 2022-07-15T15:33:35.271884Z Last Updated: 2024-09-16T23:22:03.445Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-843 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Cont
ssue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-32.html
CVE ID: CVE-2022-34222 State: PUBLISHED Published: 2022-07-15T15:34:11.327Z Last Updated: 2025-04-23T18:01:18.262Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a vict
CVE ID: CVE-2022-34223 State: PUBLISHED Published: 2022-07-15T15:34:03.670Z Last Updated: 2025-04-23T18:01:24.511Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
t open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-32.html
CVE ID: CVE-2022-34224 State: PUBLISHED Published: 2023-09-11T13:22:00.943Z Last Updated: 2024-08-03T08:16:17.317Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securi
t open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-32.html
CVE ID: CVE-2022-34225 State: PUBLISHED Published: 2022-07-15T15:34:16.777Z Last Updated: 2025-04-23T18:01:10.730Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
CVE ID: CVE-2022-34226 State: PUBLISHED Published: 2022-07-15T15:34:23.667Z Last Updated: 2025-04-23T18:01:03.484Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a vict
CVE ID: CVE-2022-34227 State: PUBLISHED Published: 2023-09-11T13:22:04.204Z Last Updated: 2024-08-03T09:07:14.309Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securi