deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-49007
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49007
CVE: CVE-2024-49008
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49008
CVE: CVE-2024-49009
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49009
CVE: CVE-2024-49010
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49010
CVE: CVE-2024-49011
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49011
CVE: CVE-2024-49012
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49012
CVE: CVE-2024-49013
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49013
CVE: CVE-2024-49014
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49014
CVE: CVE-2024-49015
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49015
CVE: CVE-2024-49016
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49016
CVE: CVE-2024-49017
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49017
CVE: CVE-2024-49018
Published: 2024-11-12
Description: SQL Server Native Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49018
CVE: CVE-2024-49019
Published: 2024-11-12
Description: Active Directory Certificate Services Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-1390
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49019
CVE: CVE-2024-49021
Published: 2024-11-12
Description: Microsoft SQL Server Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49021
CVE: CVE-2024-49026
Published: 2024-11-12
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49026
CVE: CVE-2024-49027
Published: 2024-11-12
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49027
CVE: CVE-2024-49028
Published: 2024-11-12
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49028
CVE: CVE-2024-49029
Published: 2024-11-12
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49029
CVE: CVE-2024-49030
Published: 2024-11-12
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49030
CVE: CVE-2024-49031
Published: 2024-11-12
Description: Microsoft Office Graphics Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49031
CVE: CVE-2024-49032
Published: 2024-11-12
Description: Microsoft Office Graphics Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49032
CVE: CVE-2024-49033
Published: 2024-11-12
Description: Microsoft Word Security Feature Bypass Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49033
CVE: CVE-2024-49039
Published: 2024-11-12
Description: Windows Task Scheduler Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49039; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-49039
CVE: CVE-2024-49040
Published: 2024-11-12
Description: Microsoft Exchange Server Spoofing Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49040
CVE: CVE-2024-49043
Published: 2024-11-12
Description: Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49043
CVE: CVE-2024-49044
Published: 2024-11-12
Description: Visual Studio Elevation of Privilege Vulnerability
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49044
CVE: CVE-2024-49046
Published: 2024-11-12
Description: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49046
CVE: CVE-2024-49048
Published: 2024-11-12
Description: TorchGeo Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49048
CVE: CVE-2024-49049
Published: 2024-11-12
Description: Visual Studio Code Remote Extension Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49049
CVE: CVE-2024-49050
Published: 2024-11-12
Description: Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-501
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49050
CVE: CVE-2024-49051
Published: 2024-11-12
Description: Microsoft PC Manager Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49051
CVE: CVE-2024-49056
Published: 2024-11-12
Description: Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network.
CVSS Score: 7.3 (HIGH)
CWE: CWE-302
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49056
CVE: CVE-2024-51720
Published: 2024-11-12
Description: An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telephone number.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-307, CWE-334
References: https://support.blackberry.com/pkb/s/article/140220
CVE: CVE-2024-8068
Published: 2024-11-12
Description: Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain
CVSS Score: 8.0 (HIGH)
CWE: CWE-269
References: https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8068
CVE: CVE-2024-8069
Published: 2024-11-12
Description: Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server
CVSS Score: 8.0 (HIGH)
CWE: CWE-502
References: https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8069
CVE: CVE-2023-44255
Published: 2024-11-12
Description: An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP or HTTPs requests.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-359
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-267
CVE: CVE-2023-47543
Published: 2024-11-12
Description: An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an authenticated attacker to interact with ressources of other organizations via HTTP or HTTPS requests.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-639
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-448
CVE: CVE-2023-50176
Published: 2024-11-12
Description: A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link.
CVSS Score: 7.5 (HIGH)
CWE: CWE-384
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-475
CVE: CVE-2023-52268
Published: 2024-11-12
Description: The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to the /auth endpoint. NOTE: this module is not part of freescout-helpdesk/freescout on GitHub.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-384
References: https://freescout.net/module/end-user-portal/; https://freescout.net/modules-faq/; https://github.com/squ1dw3rm/CVE-2023-52268
CVE: CVE-2024-23666
Published: 2024-11-12
Description: A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData 
at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-602
References: https://fortiguard.fortinet.com/psirt/FG-IR-23-396
CVE: CVE-2024-26011
Published: 2024-11-12
Description: A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14, FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.0 through 7.0.3, FortiPortal version 6.0.0 through 6.0.14, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-032
CVE: CVE-2024-31496
Published: 2024-11-12
Description: A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-098
CVE: CVE-2024-32116
Published: 2024-11-12
Description: Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-099
CVE: CVE-2024-32117
Published: 2024-11-12
Description: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and below 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and below 7.2.5 & FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker to read arbitrary files from the underlying system via crafted HTTP or HTTPs requests.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-115
CVE: CVE-2024-32118
Published: 2024-11-12
Description: Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer-BigData before 7.4.0 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-116
CVE: CVE-2024-33505
Published: 2024-11-12
Description: A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege via specially crafted http requests
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-125
CVE: CVE-2024-33510
Published: 2024-11-12
Description: An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CWE-74] in FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.16 and below; FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below; FortiSASE version 24.2.b SSL-VPN web user interface may allow a remote unauthenticated attacker to perform phishing attempts via crafted requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-358
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-033
CVE: CVE-2024-35274
Published: 2024-11-12
Description: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker with read write administrative privileges to create non-arbitrary files on a chosen directory via crafted CLI requests.
CVSS Score: 2.3 (LOW)
CWE: CWE-23, CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-179
CVE: CVE-2024-36507
Published: 2024-11-12
Description: A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering.
CVSS Score: 7.3 (HIGH)
CWE: CWE-426, CWE-426
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-205
CVE: CVE-2024-36509
Published: 2024-11-12
Description: An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb version 7.6.0, version 7.4.3 and below, version 7.2.10 and below, version 7.0.10 and below, version 6.3.23 and below may allow an authenticated attacker to access the encrypted passwords of other administrators via the "Log Access Event" logs page.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-497
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-180
CVE: CVE-2024-36513
Published: 2024-11-12
Description: A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts.
CVSS Score: 8.2 (HIGH)
CWE: CWE-270
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-144
CVE: CVE-2024-40592
Published: 2024-11-12
Description: An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with a malicious package via a race condition during the installation process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-022
CVE: CVE-2024-43613
Published: 2024-11-12
Description: Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43613
CVE: CVE-2024-45114
Published: 2024-11-12
Description: Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb24-87.html
CVE: CVE-2024-45147
Published: 2024-11-12
Description: Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb24-77.html
CVE: CVE-2024-47441
Published: 2024-11-12
Description: After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb24-85.html
CVE: CVE-2024-47442
Published: 2024-11-12
Description: After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb24-85.html
CVE: CVE-2024-47443
Published: 2024-11-12
Description: After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb24-85.html
CVE: CVE-2024-47444
Published: 2024-11-12
Description: After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb24-85.html
CVE: CVE-2024-47445
Published: 2024-11-12
Description: After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb24-85.html
CVE: CVE-2024-47446
Published: 2024-11-12
Description: After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb24-85.html
CVE: CVE-2024-47449
Published: 2024-11-12
Description: Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/audition/apsb24-83.html
CVE: CVE-2024-47450
Published: 2024-11-12
Description: Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb24-87.html
CVE: CVE-2024-47451
Published: 2024-11-12
Description: Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb24-87.html
CVE: CVE-2024-47452
Published: 2024-11-12
Description: Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb24-87.html
CVE: CVE-2024-47453
Published: 2024-11-12
Description: Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb24-87.html