Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-24401 State: PUBLISHED Published: 2020-11-09T00:39:29.549544Z Last Updated: 2024-09-16T19:51:22.383Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-863 Description: Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect authorization vulnerability. A user can still access resources provisioned under their old role after an administrator removes the role or disables the user's account. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb20-59.html
CVE ID: CVE-2020-24402 State: PUBLISHED Published: 2020-11-09T00:39:15.182126Z Last Updated: 2024-09-16T19:04:11.706Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-276 Description: Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorization. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb20-59.htm
al Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb20-59.html
CVE ID: CVE-2020-24403 State: PUBLISHED Published: 2020-11-09T00:39:38.056392Z Last Updated: 2024-09-16T16:34:00.319Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-285 Description: Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect user permissions vulnerability within the Inventory component. This vulnerability could be abused by authenticated users with Inventory and Source permissions to make unauthorized changes to inventory source data via the REST API. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb20-59.h
onal Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb20-59.html
CVE ID: CVE-2020-24404 State: PUBLISHED Published: 2020-11-09T00:40:04.994192Z Last Updated: 2024-09-16T17:47:57.272Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-285 Description: Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb20-59.html
CVE ID: CVE-2020-24405 State: PUBLISHED Published: 2020-11-09T00:39:43.340002Z Last Updated: 2024-09-16T20:22:14.104Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-285 Description: Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions issue vulnerability in the Inventory module. This vulnerability could be abused by authenticated users to modify inventory stock data without authorization. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb20-59.html
CVE ID: CVE-2020-24406 State: PUBLISHED Published: 2020-11-09T00:39:49.001589Z Last Updated: 2024-09-17T01:12:06.334Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-200 Description: When in maintenance mode, Magento version 2.4.0 and 2.3.4 (and earlier) are affected by an information disclosure vulnerability that could expose the installation path during build deployments. This information could be helpful to attackers if they are able to identify other exploitable vulnerabilities in the environment. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/mag
ironment. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb20-59.html
CVE ID: CVE-2020-24407 State: PUBLISHED Published: 2020-11-09T00:39:56.269601Z Last Updated: 2024-09-16T20:16:25.237Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-434 Description: Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb20-59.html
CVE ID: CVE-2020-24408 State: PUBLISHED Published: 2020-10-16T14:03:11.096321Z Last Updated: 2024-09-17T03:02:26.471Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-79 Description: Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file. Additional Analyst Notes: - CVE Program Container: References: - http
requires a victim to browse to the uploaded file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb20-59.html
CVE ID: CVE-2020-24409 State: PUBLISHED Published: 2020-10-20T21:55:54.265388Z Last Updated: 2024-09-17T03:48:41.685Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing crafted PDF files. This could result in a read past the end of an allocated memory structure, potentially resulting in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/sec
ser interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb20-53.html - https://www.zerodayinitiative.com/advisories/ZDI-20-1271/
CVE ID: CVE-2020-24410 State: PUBLISHED Published: 2020-10-20T21:56:03.231362Z Last Updated: 2024-09-16T22:36:31.197Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-125 Description: Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing crafted PDF files. This could result in a read past the end of an allocated memory structure, potentially resulting in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/sec
ser interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb20-53.html - https://www.zerodayinitiative.com/advisories/ZDI-20-1272/
CVE ID: CVE-2020-24411 State: PUBLISHED Published: 2020-10-20T21:55:02.307676Z Last Updated: 2024-09-16T19:15:57.488Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator version 24.2 (and earlier) is affected by an out-of-bounds write vulnerability when handling crafted PDF files. This could result in a write past the end of an allocated memory structure, potentially resulting in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/
s user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb20-53.html - https://www.zerodayinitiative.com/advisories/ZDI-20-1270/
CVE ID: CVE-2020-24412 State: PUBLISHED Published: 2020-10-20T21:57:43.151411Z Last Updated: 2024-09-16T20:07:11.511Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-788 Description: Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb20-53.html
CVE ID: CVE-2020-24413 State: PUBLISHED Published: 2020-10-20T21:55:25.657784Z Last Updated: 2024-09-16T19:41:51.211Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-788 Description: Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb20-53.html
CVE ID: CVE-2020-24414 State: PUBLISHED Published: 2020-10-20T21:56:14.976477Z Last Updated: 2024-09-17T04:15:13.930Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-788 Description: Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb20-53.html
CVE ID: CVE-2020-24415 State: PUBLISHED Published: 2020-10-20T21:55:39.192788Z Last Updated: 2024-09-16T19:52:05.858Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-788 Description: Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb20-53.html
CVE ID: CVE-2020-24416 State: PUBLISHED Published: 2020-10-20T21:52:20.864992Z Last Updated: 2024-09-16T19:09:05.695Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Marketo Problem Types: CWE-79 Description: Marketo Sales Insight plugin version 1.4355 (and earlier) is affected by a blind stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/pr
e vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/marketo/apsb20-60.html
CVE ID: CVE-2020-24418 State: PUBLISHED Published: 2020-10-21T20:18:26.793701Z Last Updated: 2024-09-16T17:18:31.586Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-125 Description: Adobe After Effects version 17.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .aepx file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. This vulnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https
lnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/after_effects/apsb20-62.html
CVE ID: CVE-2020-24419 State: PUBLISHED Published: 2020-10-21T20:18:46.339163Z Last Updated: 2024-09-16T22:41:09.083Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-427 Description: Adobe After Effects version 17.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/after_effects/apsb20-62.html
CVE ID: CVE-2020-24420 State: PUBLISHED Published: 2020-10-21T20:50:27.019804Z Last Updated: 2024-09-16T18:03:15.074Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Problem Types: CWE-427 Description: Adobe Photoshop for Windows version 21.2.1 (and earlier) is affected by an uncontrolled search path element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/photoshop/apsb20-63.html
CVE ID: CVE-2020-24421 State: PUBLISHED Published: 2020-10-21T21:28:07.197764Z Last Updated: 2024-09-16T20:07:07.527Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-476 Description: Adobe InDesign version 15.1.2 (and earlier) is affected by a NULL pointer dereference bug that occurs when handling a malformed .indd file. The impact is limited to causing a denial-of-service of the client application. User interaction is required to exploit this issue. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/indesign/apsb20-66.html
CVE ID: CVE-2020-24422 State: PUBLISHED Published: 2020-10-21T19:58:36.712202Z Last Updated: 2024-09-16T16:53:58.744Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Creative Cloud (desktop component) Problem Types: CWE-427 Description: Adobe Creative Cloud Desktop Application version 5.2 (and earlier) and 2.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.
hat a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/creative-cloud/apsb20-68.html
CVE ID: CVE-2020-24423 State: PUBLISHED Published: 2020-10-21T21:00:06.245282Z Last Updated: 2024-09-16T21:02:34.707Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Media Encoder Problem Types: CWE-427 Description: Adobe Media Encoder version 14.4 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/media-encoder/apsb20-65.html
CVE ID: CVE-2020-24424 State: PUBLISHED Published: 2020-10-21T20:53:23.676742Z Last Updated: 2024-09-17T04:04:16.469Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-427 Description: Adobe Premiere Pro version 14.4 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb20-64.html
CVE ID: CVE-2020-24425 State: PUBLISHED Published: 2020-10-21T20:07:24.139092Z Last Updated: 2024-09-16T23:56:56.700Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Dreamweaver Problem Types: CWE-427 Description: Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/dreamweaver/apsb20-55.html
CVE ID: CVE-2020-24426 State: PUBLISHED Published: 2020-11-05T19:31:01.324266Z Last Updated: 2024-09-17T00:42:40.121Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Pr
of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-67.html - https://www.zerodayinitiative.com/advisories/ZDI-20-1354/
CVE ID: CVE-2020-24427 State: PUBLISHED Published: 2020-11-05T19:31:11.362146Z Last Updated: 2024-09-16T22:25:56.733Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-20 Description: Acrobat Reader versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an input validation vulnerability when decoding a crafted codec that could result in the disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Addi
ons such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-67.html
CVE ID: CVE-2020-24428 State: PUBLISHED Published: 2020-11-05T19:31:26.779929Z Last Updated: 2024-09-16T20:21:30.729Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-367 Description: Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a time-of-check time-of-use (TOCTOU) race condition vulnerability that could result in local privilege escalation. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://help
that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-67.html
CVE ID: CVE-2020-24429 State: PUBLISHED Published: 2020-11-05T19:31:44.277278Z Last Updated: 2024-09-17T01:02:02.155Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-347 Description: Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a signature verification bypass that could result in local privilege escalation. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acro
us file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-67.html
CVE ID: CVE-2020-24430 State: PUBLISHED Published: 2020-11-05T19:31:52.869877Z Last Updated: 2024-09-16T19:31:04.719Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability when handling malicious JavaScript. This vulnerability could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: Re
ires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-67.html
CVE ID: CVE-2020-24431 State: PUBLISHED Published: 2020-11-05T19:31:34.380266Z Last Updated: 2024-09-16T17:43:53.414Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-285 Description: Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a security feature bypass that could result in dynamic library code injection by the Adobe Reader process. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adob
a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb20-67.html
CVE ID: CVE-2020-24432 State: PUBLISHED Published: 2020-11-05T19:32:03.521826Z Last Updated: 2024-09-17T01:40:49.942Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-20 Description: Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) and Adobe Acrobat Pro DC 2017.011.30175 (and earlier) are affected by an improper input validation vulnerability that could result in arbitrary JavaScript execution in the context of the current user. To exploit this issue, an attacker must acquire and then modify a certified PDF document that is trusted by the vi