Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
L2BEJMHCD5FJGI6XLWQI7UEA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F5C3NYVJ73ITE6HUOVVHBUAGORVEJRHO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFZORZYCMUZZFIOEZICJ7VH2BZIGY3HV/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html - https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
CVE ID: CVE-2023-38198 State: PUBLISHED Published: 2023-07-13T00:00:00.000Z Last Updated: 2025-02-13T17:01:47.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/acmesh-official/acme.sh/issues/4659 - https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/heXVr8o83Ys - https://news.ycombinator.com/item?id=36252310 - https://github.com/acmesh-official/acme.sh/releases/tag/3.0.6 - https://news.ycombinator.com/item?id=36254093 - https://www.reddit.com/r/n
/acmesh-official/acme.sh/releases/tag/3.0.6 - https://news.ycombinator.com/item?id=36254093 - https://www.reddit.com/r/netsec/comments/144ygg7/acmesh_runs_arbitrary_commands_from_a_remote/ - http://www.openwall.com/lists/oss-security/2023/07/13/1
CVE ID: CVE-2023-38199 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T18:55:24.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might allow attackers to bypass a WAF with a crafted payload, aka "Content-Type confusion" between the WAF and the backend application. This occurs when the web application relies on only the last Content-Type header. Other platforms may reject the additional Content-Type header or merge conflicting headers, leading to detection as a malformed header. Additional Analyst Notes: - CVE Pro
ype header or merge conflicting headers, leading to detection as a malformed header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/coreruleset/coreruleset/issues/3191 - https://github.com/coreruleset/coreruleset/pull/3237
CVE ID: CVE-2023-38200 State: PUBLISHED Published: 2023-07-24T15:19:19.291Z Last Updated: 2025-11-20T17:41:35.153Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9 Problem Types: CWE-400 Description: A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:5080 - https://access.redhat.com/security/cve/CVE-2023-38200 - https://bu
: - https://access.redhat.com/errata/RHSA-2023:5080 - https://access.redhat.com/security/cve/CVE-2023-38200 - https://bugzilla.redhat.com/show_bug.cgi?id=2222692 - https://github.com/keylime/keylime/pull/1421
CVE ID: CVE-2023-38201 State: PUBLISHED Published: 2023-08-25T16:15:39.449Z Last Updated: 2025-11-20T17:41:38.960Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 9 Problem Types: CWE-639 Description: A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database. Additional Analyst Notes: - CVE Program Container:
r, resulting in a breach of the integrity of the registrar database. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:5080 - https://access.redhat.com/security/cve/CVE-2023-38201 - https://bugzilla.redhat.com/show_bug.cgi?id=2222693 - https://github.com/keylime/keylime/commit/9e5ac9f25cd400b16d5969f531cee28290543f2a - https://github.com/keylime/keylime/security/advisories/GHSA-f4r5-q63f-gcww
CVE ID: CVE-2023-38203 State: PUBLISHED Published: 2023-07-20T15:41:10.683Z Last Updated: 2025-10-21T23:05:42.563Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-502 Description: Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html
CVE ID: CVE-2023-38204 State: PUBLISHED Published: 2023-09-14T07:40:13.695Z Last Updated: 2025-02-27T20:52:25.205Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-502 Description: Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html
CVE ID: CVE-2023-38205 State: PUBLISHED Published: 2023-09-14T07:40:12.725Z Last Updated: 2025-10-21T23:05:37.864Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: ColdFusion Problem Types: CWE-284 Description: Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
ue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html
CVE ID: CVE-2023-38206 State: PUBLISHED Published: 2023-09-14T07:40:06.729Z Last Updated: 2025-02-27T20:52:32.850Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Adobe Products: ColdFusion Problem Types: CWE-284 Description: Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints resulting in a low-confidentiality impact. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Progra
identiality impact. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html
CVE ID: CVE-2023-38207 State: PUBLISHED Published: 2023-08-09T07:41:53.095Z Last Updated: 2025-02-27T21:05:45.656Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-91 Description: Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by a XML Injection (aka Blind XPath Injection) vulnerability that could lead in minor arbitrary file system read. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-42.ht
Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-42.html
CVE ID: CVE-2023-38208 State: PUBLISHED Published: 2023-08-09T07:41:47.125Z Last Updated: 2025-02-27T21:05:52.079Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-78 Description: Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA A
xploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-42.html
CVE ID: CVE-2023-38209 State: PUBLISHED Published: 2023-08-09T07:41:46.279Z Last Updated: 2025-02-27T21:05:58.591Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-863 Description: Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Incorrect Authorization vulnerability that could lead to a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
ue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-42.html
CVE ID: CVE-2023-38210 State: PUBLISHED Published: 2023-08-10T13:40:32.056Z Last Updated: 2025-02-27T21:04:01.798Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-400 Description: Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
pen a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/xmpcore/apsb23-45.html
CVE ID: CVE-2023-38211 State: PUBLISHED Published: 2023-08-09T08:23:35.149Z Last Updated: 2025-02-27T21:05:34.256Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-416 Description: Adobe Dimension version 3.4.9 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-44.html
CVE ID: CVE-2023-38212 State: PUBLISHED Published: 2023-08-09T08:23:36.555Z Last Updated: 2025-02-27T21:05:28.680Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-122 Description: Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-44.html
CVE ID: CVE-2023-38213 State: PUBLISHED Published: 2023-08-09T08:23:34.276Z Last Updated: 2025-02-27T21:05:40.057Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension version 3.4.9 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/produc
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-44.html
CVE ID: CVE-2023-38214 State: PUBLISHED Published: 2023-09-13T13:01:33.386Z Last Updated: 2025-02-27T20:53:15.697Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.c
browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/experience-manager/apsb23-43.html
CVE ID: CVE-2023-38215 State: PUBLISHED Published: 2023-09-13T13:01:34.163Z Last Updated: 2025-02-27T20:53:09.646Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.17 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.c
CVE ID: CVE-2023-38216 State: PUBLISHED Published: 2023-10-11T11:40:55.056Z Last Updated: 2025-02-27T20:42:00.513Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Bridge Problem Types: CWE-416 Description: Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
pen a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb23-49.html
CVE ID: CVE-2023-38217 State: PUBLISHED Published: 2023-10-11T11:40:56.484Z Last Updated: 2025-02-27T20:41:52.756Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
ust open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb23-49.html
CVE ID: CVE-2023-38218 State: PUBLISHED Published: 2023-10-13T06:15:09.975Z Last Updated: 2024-08-02T17:30:14.198Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-863 Description: Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Incorrect Authorization . An authenticated attacker can exploit this to achieve information exposure and privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb23-50.html
CVE ID: CVE-2023-38219 State: PUBLISHED Published: 2023-10-13T06:15:14.650Z Last Updated: 2025-02-27T20:40:52.021Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-79 Description: Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Payload is stored in
may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Payload is stored in an admin area, resulting in high confidentiality and integrity impact. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-50.html
CVE ID: CVE-2023-38220 State: PUBLISHED Published: 2023-10-13T06:15:13.275Z Last Updated: 2025-02-27T20:40:58.670Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-285 Description: Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
t require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-50.html
CVE ID: CVE-2023-38221 State: PUBLISHED Published: 2023-10-13T06:15:06.405Z Last Updated: 2025-02-27T20:41:27.926Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Commerce Problem Types: CWE-89 Description: Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead in arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction and attack complexity is high as it requires kn
d attacker. Exploitation of this issue does not require user interaction and attack complexity is high as it requires knowledge of tooling beyond just using the UI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-50.html
CVE ID: CVE-2023-38222 State: PUBLISHED Published: 2023-08-10T13:17:40.922Z Last Updated: 2024-08-02T17:30:14.190Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb23-3
itional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb23-30.html
CVE ID: CVE-2023-38223 State: PUBLISHED Published: 2023-08-10T13:17:38.719Z Last Updated: 2024-08-02T17:30:14.096Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-824 Description: Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Access of Uninitialized Pointer that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb
Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb23-30.html
CVE ID: CVE-2023-38224 State: PUBLISHED Published: 2023-08-10T13:17:25.780Z Last Updated: 2025-02-27T21:05:07.080Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb23-30.html
CVE ID: CVE-2023-38225 State: PUBLISHED Published: 2023-08-10T13:17:43.864Z Last Updated: 2024-08-02T17:30:14.061Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb23-3
CVE ID: CVE-2023-38226 State: PUBLISHED Published: 2023-08-10T13:17:47.227Z Last Updated: 2024-08-02T17:30:14.193Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-824 Description: Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/product
alicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb23-30.html