Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
he existing user passwords on their operating systems and passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2022-30628 State: PUBLISHED Published: 2022-07-21T15:37:28.201830Z Last Updated: 2024-09-16T22:02:59.240Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Supersmart.me Products: Supersmart.me – Walk Through Problem Types: access to business information without authentication Description: It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that provides invoice images based on the URL https://XXXX.supersmart.me/services/v4/invoiceImg?orderId=XXXXX Additional Analyst Notes: - CVE Program Container: Reference
s://XXXX.supersmart.me/services/v4/invoiceImg?orderId=XXXXX Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2022-30629 State: PUBLISHED Published: 2022-08-09T20:17:31 Last Updated: 2024-08-03T06:56:13.230Z Vendors: Go standard library Products: crypto/tls Problem Types: CWE-200: Information Exposure Description: Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption. Additional Analyst Notes: - CVE Program Container: References: - https://go.dev/cl/405994 - https://go.googlesource.com/go/+/fe4de36198794c447fbd9d7cc2d7199a506c76a5 - https://go.dev/issue/52814 - https://groups.google.com/g/golang-announce/c
/+/fe4de36198794c447fbd9d7cc2d7199a506c76a5 - https://go.dev/issue/52814 - https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ - https://pkg.go.dev/vuln/GO-2022-0531
CVE ID: CVE-2022-30630 State: PUBLISHED Published: 2022-08-09T20:17:15 Last Updated: 2024-08-03T06:56:12.871Z Vendors: Go standard library Products: io/fs Problem Types: CWE-674: Uncontrolled Recursion Description: Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators. Additional Analyst Notes: - CVE Program Container: References: - https://go.dev/cl/417065 - https://go.googlesource.com/go/+/fa2d41d0ca736f3ad6b200b2a4e134364e9acc59 - https://go.dev/issue/53415 - https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE - https://pkg.go.dev/vuln/GO-2022-052
s://go.dev/issue/53415 - https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE - https://pkg.go.dev/vuln/GO-2022-0527
CVE ID: CVE-2022-30631 State: PUBLISHED Published: 2022-08-09T20:16:32.000Z Last Updated: 2025-10-20T17:51:28.366Z Vendors: Go standard library Products: compress/gzip Problem Types: CWE-674: Uncontrolled Recursion Description: Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/cl/417067 - https://go.googlesource.com/go/+/b2b8872c876201eac2d0707276c6999ff3eb185e - https://go.dev/issue/53168 - https://groups.goog
s://go.googlesource.com/go/+/b2b8872c876201eac2d0707276c6999ff3eb185e - https://go.dev/issue/53168 - https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE - https://pkg.go.dev/vuln/GO-2022-0524
CVE ID: CVE-2022-30632 State: PUBLISHED Published: 2022-08-09T20:15:37 Last Updated: 2024-08-03T06:56:13.251Z Vendors: Go standard library Products: path/filepath Problem Types: CWE-674: Uncontrolled Recursion Description: Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators. Additional Analyst Notes: - CVE Program Container: References: - https://go.dev/cl/417066 - https://go.googlesource.com/go/+/ac68c6c683409f98250d34ad282b9e1b0c9095ef - https://go.dev/issue/53416 - https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE - https://pkg.go.dev/vuln
095ef - https://go.dev/issue/53416 - https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE - https://pkg.go.dev/vuln/GO-2022-0522
CVE ID: CVE-2022-30633 State: PUBLISHED Published: 2022-08-09T20:16:19 Last Updated: 2024-08-03T06:56:13.196Z Vendors: Go standard library Products: encoding/xml Problem Types: CWE-674: Uncontrolled Recursion Description: Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via unmarshalling an XML document into a Go struct which has a nested field that uses the 'any' field tag. Additional Analyst Notes: - CVE Program Container: References: - https://go.dev/cl/417061 - https://go.googlesource.com/go/+/c4c1993fd2a5b26fe45c09592af6d3388a3b2e08 - https://go.dev/issue/53611 - https://groups.google.com/g/go
lesource.com/go/+/c4c1993fd2a5b26fe45c09592af6d3388a3b2e08 - https://go.dev/issue/53611 - https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE - https://pkg.go.dev/vuln/GO-2022-0523
CVE ID: CVE-2022-30634 State: PUBLISHED Published: 2022-07-15T19:36:19 Last Updated: 2024-08-03T06:56:13.255Z Vendors: Go standard library Products: crypto/rand Problem Types: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') Description: Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes. Additional Analyst Notes: - CVE Program Container: References: - https://go.dev/cl/402257 - https://go.googlesource.com/go/+/bb1f4416180511231de6d17a1f2f55c82aafc863 - https://go.dev/issue/52561 - https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ -
f55c82aafc863 - https://go.dev/issue/52561 - https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ - https://pkg.go.dev/vuln/GO-2022-0477
CVE ID: CVE-2022-30635 State: PUBLISHED Published: 2022-08-09T20:16:05 Last Updated: 2024-08-03T06:56:13.235Z Vendors: Go standard library Products: encoding/gob Problem Types: CWE-674: Uncontrolled Recursion Description: Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures. Additional Analyst Notes: - CVE Program Container: References: - https://go.dev/cl/417064 - https://go.googlesource.com/go/+/6fa37e98ea4382bf881428ee0c150ce591500eb7 - https://go.dev/issue/53615 - https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE - https://pkg.go.de
ce591500eb7 - https://go.dev/issue/53615 - https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE - https://pkg.go.dev/vuln/GO-2022-0526
CVE ID: CVE-2022-30636 State: PUBLISHED Published: 2024-07-02T19:51:46.635Z Last Updated: 2024-08-07T16:21:06.868Z Vendors: golang.org/x/crypto Products: golang.org/x/crypto/acme/autocert Problem Types: CWE 22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token value to lookup in the DirCache implementation. On Windows, path.Base acts differently to filepath.Base, since Windows uses a different path separator (\ vs. /), allowing a user to provide a relative path, i.e. .well-known/acme-challenge/..\..\asd becomes ..\..\asd. The extracted path is then suffixed with +http-01, joined w
i.e. .well-known/acme-challenge/..\..\asd becomes ..\..\asd. The extracted path is then suffixed with +http-01, joined with the cache directory, and opened. Since the controlled path is suffixed with +http-01 before opening, the impact of this is significantly limited, since it only allows reading arbitrary files on the system if and only if they have this suffix. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/cl/408694 - https://go.dev/issue/53082 - https://pkg.go.dev/vuln/GO-2024-2961
CVE ID: CVE-2022-30637 State: PUBLISHED Published: 2023-09-07T13:12:07.241Z Last Updated: 2025-02-27T20:58:10.615Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb22-26.html
CVE ID: CVE-2022-30638 State: PUBLISHED Published: 2023-09-07T13:12:04.635Z Last Updated: 2025-02-27T20:58:30.141Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
CVE ID: CVE-2022-30639 State: PUBLISHED Published: 2023-09-07T13:12:15.282Z Last Updated: 2025-02-27T20:57:33.497Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
CVE ID: CVE-2022-30640 State: PUBLISHED Published: 2023-09-07T13:12:10.781Z Last Updated: 2025-02-27T20:57:48.512Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
CVE ID: CVE-2022-30641 State: PUBLISHED Published: 2023-09-07T13:12:05.471Z Last Updated: 2025-02-27T20:58:23.410Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
CVE ID: CVE-2022-30642 State: PUBLISHED Published: 2023-09-07T13:12:16.054Z Last Updated: 2025-02-27T20:57:26.333Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
CVE ID: CVE-2022-30643 State: PUBLISHED Published: 2023-09-07T13:12:08.628Z Last Updated: 2025-02-27T20:58:02.149Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
CVE ID: CVE-2022-30644 State: PUBLISHED Published: 2023-09-07T13:12:14.497Z Last Updated: 2025-02-27T20:57:40.537Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-416 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrat
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb22-26.html
CVE ID: CVE-2022-30645 State: PUBLISHED Published: 2023-09-07T13:12:09.405Z Last Updated: 2025-02-27T20:57:56.803Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
CVE ID: CVE-2022-30646 State: PUBLISHED Published: 2023-09-07T13:12:06.461Z Last Updated: 2025-02-27T20:58:16.175Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
CVE ID: CVE-2022-30647 State: PUBLISHED Published: 2022-06-15T20:23:01.787Z Last Updated: 2025-04-23T18:12:14.705Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-416 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrat
CVE ID: CVE-2022-30648 State: PUBLISHED Published: 2022-06-15T20:23:29.622Z Last Updated: 2025-04-23T18:12:08.117Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-416 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrat
CVE ID: CVE-2022-30649 State: PUBLISHED Published: 2022-06-15T20:23:58.670Z Last Updated: 2025-04-23T18:12:01.405Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/ill
CVE ID: CVE-2022-30650 State: PUBLISHED Published: 2022-06-16T17:04:26.382Z Last Updated: 2025-04-23T18:10:23.112Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-122 Description: Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/ap
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb22-29.html
CVE ID: CVE-2022-30651 State: PUBLISHED Published: 2022-06-16T17:04:56.619Z Last Updated: 2025-04-23T18:10:16.362Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-125 Description: Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: -
itation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb22-29.html
CVE ID: CVE-2022-30652 State: PUBLISHED Published: 2022-06-16T17:05:19.189Z Last Updated: 2025-04-23T18:10:09.855Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-787 Description: Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb22-2
CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb22-29.html
CVE ID: CVE-2022-30653 State: PUBLISHED Published: 2022-06-16T17:05:40.362Z Last Updated: 2025-04-23T18:10:03.759Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-787 Description: Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb22-2
CVE ID: CVE-2022-30654 State: PUBLISHED Published: 2022-06-16T17:06:03.220Z Last Updated: 2025-04-23T18:09:57.122Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-122 Description: Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/ap
CVE ID: CVE-2022-30655 State: PUBLISHED Published: 2022-06-16T17:06:30.390Z Last Updated: 2025-04-23T18:09:50.668Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-416 Description: Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb22-29.html
CVE ID: CVE-2022-30656 State: PUBLISHED Published: 2022-06-16T17:06:48.067Z Last Updated: 2025-04-23T18:09:44.388Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-787 Description: Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb22-2
CVE ID: CVE-2022-30657 State: PUBLISHED Published: 2022-06-16T17:07:13.484Z Last Updated: 2025-04-23T18:09:37.822Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-416 Description: Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb22-29.html