Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28219 State: PUBLISHED Published: 2022-04-05T18:32:21 Last Updated: 2024-08-03T05:48:37.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://manageengine.com - https://www.manageengine.com/products/active-directory-audit/cve-2022-28219.html - https://www.horizon3.ai/red-team-blog-cve-2022-28219/ - http://cewolf.sourceforge.net/new/index.html - http://packetstormsecurity.com/files/167997/ManageEngine-ADAudit-Plus-Path-Traversal-XML-Injection.html
CVE ID: CVE-2022-28220 State: PUBLISHED Published: 2022-09-08T07:40:09 Last Updated: 2024-08-03T05:48:37.476Z Vendors: Apache Software Foundation Products: Apache James Problem Types: CWE-77 Description: Apache James prior to release 3.6.3 and 3.7.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. Fix of CVE-2021-38542, which solved similar problem fron Apache James 3.6.1, is subject to a parser differential and do not take into account concurrent requests. Additional Analyst Notes: - CVE Program Container: References: - https://james.apache.org/james/update/2022/08/26/james-3.7.1.html - http://www.openwall.com/lists/oss-security/2022/09/20/1
CVE ID: CVE-2022-28221 State: PUBLISHED Published: 2022-04-19T20:26:34.000Z Last Updated: 2025-02-07T20:48:52.797Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: CleanTalk Products: CleanTalk AntiSpam Problem Types: CWE-79 Description: The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php` Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/blog/2022/03/reflected-xss-in-spam-protection-antispam-firewall-by-cleantalk/
CVE ID: CVE-2022-28222 State: PUBLISHED Published: 2022-04-19T20:26:39.000Z Last Updated: 2025-02-07T20:48:19.295Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: CleanTalk Products: CleanTalk AntiSpam Problem Types: CWE-79 Description: The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php` Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/blog/2022/03/reflected-xss-in-spam-protection-antispam-firewall-by-cleantalk/
CVE ID: CVE-2022-28223 State: PUBLISHED Published: 2022-03-30T17:49:31 Last Updated: 2024-08-03T05:48:37.463Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40bertinjoseb/post-auth-rce-based-in-malicious-lua-plugin-script-upload-scada-controllers-located-in-russia-57044425ac38
CVE ID: CVE-2022-28224 State: PUBLISHED Published: 2022-06-06T17:19:12.810566Z Last Updated: 2024-09-16T20:31:41.256Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H) Vendors: Tigera, Project Calico Products: Calico Enterprise, Calico Problem Types: CWE-200, CWE-201 Description: Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature. Due to insufficient validation, a privileged attacker may be able to set a floating IP annotation to a pod even if the feature is not enabled. This may allow the attacker to intercept and reroute traffic to their compromised pod. Add
f the feature is not enabled. This may allow the attacker to intercept and reroute traffic to their compromised pod. Additional Analyst Notes: - CVE Program Container: References: - https://www.tigera.io/security-bulletins-tta-2022-001/
CVE ID: CVE-2022-28225 State: PUBLISHED Published: 2022-06-15T19:10:32 Last Updated: 2024-08-03T05:48:37.339Z Vendors: n/a Products: Yandex Browser (Desktop) Problem Types: Privilege escalation Description: Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process. Additional Analyst Notes: - CVE Program Container: References: - https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE ID: CVE-2022-28226 State: PUBLISHED Published: 2022-06-15T19:06:17 Last Updated: 2024-08-03T05:48:37.380Z Vendors: n/a Products: Yandex Browser (Desktop) Problem Types: Privilege escalation Description: Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating temporary files in directory with insecure permissions during Yandex Browser update process. Additional Analyst Notes: - CVE Program Container: References: - https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE ID: CVE-2022-28228 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T15:12:57.634Z Vendors: n/a Products: YDB Problem Types: Out-of-bounds Read Description: Out-of-bounds read was discovered in YDB server. An attacker could construct a query with insert statement that would allow him to read sensitive information from other memory locations or cause a crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ydb.tech/ru/docs/security-changelog#28-11-2022
CVE ID: CVE-2022-28229 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T13:25:11.253Z Vendors: n/a Products: userver Problem Types: Uncontrolled Resource Consumption Description: The hash functionality in userver before 42059b6319661583b3080cab9b595d4f8ac48128 allows attackers to cause a denial of service via crafted HTTP request, involving collisions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://userver.tech/df/d3a/md_en_userver_security_changelog.html
CVE ID: CVE-2022-28230 State: PUBLISHED Published: 2022-05-11T17:26:33.975140Z Last Updated: 2024-09-16T18:39:47.929Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: Refe
CVE ID: CVE-2022-28231 State: PUBLISHED Published: 2022-05-11T17:27:27.209419Z Last Updated: 2024-09-17T01:15:29.106Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by an out-of-bounds read vulnerability when processing a doc object, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a vict
to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-28232 State: PUBLISHED Published: 2022-05-11T17:28:10.912425Z Last Updated: 2024-09-16T19:42:00.282Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the collab object that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: Refer
s user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-28233 State: PUBLISHED Published: 2022-05-11T17:28:57.938788Z Last Updated: 2024-09-17T01:21:16.592Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References:
CVE ID: CVE-2022-28234 State: PUBLISHED Published: 2022-05-11T17:29:44.104266Z Last Updated: 2024-09-17T02:56:40.239Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-122 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a heap-based buffer overflow vulnerability due to insecure handling of a crafted .pdf file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .pdf file Additional Analyst Notes: - CVE Program Con
ion requires user interaction in that a victim must open a crafted .pdf file Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-28235 State: PUBLISHED Published: 2022-05-11T17:31:21.670736Z Last Updated: 2024-09-16T17:22:36.607Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: Refe
CVE ID: CVE-2022-28236 State: PUBLISHED Published: 2022-05-11T17:32:16.805652Z Last Updated: 2024-09-17T01:51:28.785Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/
CVE ID: CVE-2022-28237 State: PUBLISHED Published: 2022-05-11T17:33:09.328007Z Last Updated: 2024-09-17T01:21:09.097Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References:
CVE ID: CVE-2022-28238 State: PUBLISHED Published: 2022-05-11T17:33:48.396330Z Last Updated: 2024-09-17T00:31:47.108Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References:
CVE ID: CVE-2022-28239 State: PUBLISHED Published: 2022-05-11T17:34:27.817648Z Last Updated: 2024-09-17T02:02:44.017Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victi
CVE ID: CVE-2022-28240 State: PUBLISHED Published: 2022-05-11T17:35:36.954632Z Last Updated: 2024-09-16T21:03:37.303Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securit
open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-28241 State: PUBLISHED Published: 2022-05-11T17:36:36.007258Z Last Updated: 2024-09-17T00:21:51.769Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victi
CVE ID: CVE-2022-28242 State: PUBLISHED Published: 2022-05-11T17:37:36.811211Z Last Updated: 2024-09-16T18:13:47.069Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securit
CVE ID: CVE-2022-28243 State: PUBLISHED Published: 2022-05-11T17:38:23.258614Z Last Updated: 2024-09-16T20:37:34.206Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victi
CVE ID: CVE-2022-28244 State: PUBLISHED Published: 2022-05-11T17:39:13.587890Z Last Updated: 2024-09-17T01:41:08.519Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-657 Description: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a violation of secure design principles through bypassing the content security policy, which could result in an attacker sending arbitrarily configured requests to the cross-origin attack target domain. Exploitation requires user interaction in which the victim needs to access a crafted PDF file on an at
ck target domain. Exploitation requires user interaction in which the victim needs to access a crafted PDF file on an attacker's server. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-28245 State: PUBLISHED Published: 2022-05-11T17:40:00.764209Z Last Updated: 2024-09-17T04:08:59.119Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a
y to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-28246 State: PUBLISHED Published: 2022-05-11T17:41:17.257577Z Last Updated: 2024-09-16T17:08:47.339Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a
CVE ID: CVE-2022-28247 State: PUBLISHED Published: 2022-05-11T17:42:04.643883Z Last Updated: 2024-09-16T18:17:53.217Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-427 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an uncontrolled search path vulnerability that could lead to local privilege escalation. Exploitation of this issue requires user interaction in that a victim must run the uninstaller with Admin privileges. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/
ith Admin privileges. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-28248 State: PUBLISHED Published: 2022-05-11T17:42:45.690090Z Last Updated: 2024-09-17T01:25:33.523Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a
CVE ID: CVE-2022-28249 State: PUBLISHED Published: 2022-05-11T17:43:36.819694Z Last Updated: 2024-09-16T22:45:29.226Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a
CVE ID: CVE-2022-28250 State: PUBLISHED Published: 2022-05-11T17:44:24.010164Z Last Updated: 2024-09-17T02:11:08.925Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Con
issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-16.html
CVE ID: CVE-2022-28251 State: PUBLISHED Published: 2022-05-11T17:45:04.137738Z Last Updated: 2024-09-16T19:05:06.136Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a
CVE ID: CVE-2022-28252 State: PUBLISHED Published: 2022-05-11T17:45:46.818881Z Last Updated: 2024-09-17T00:31:21.515Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a mal