deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-30683
Published: 2021-09-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application could execute arbitrary code leading to compromise of user information.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30684
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A remote attacker may cause an unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212529
CVE: CVE-2021-30685
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Parsing a maliciously crafted audio file may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30686
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted audio file may disclose restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30687
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted image may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30688
Published: 2021-09-08
Description: A malicious application may be able to break out of its sandbox. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A path handling issue was addressed with improved validation.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212529
CVE: CVE-2021-30689
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532
CVE: CVE-2021-30690
Published: 2021-09-08
Description: Multiple issues in apache were addressed by updating apache to version 2.4.46. This issue is fixed in Security Update 2021-004 Mojave. Multiple issues in apache.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/en-us/HT212531; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30691
Published: 2021-09-08
Description: An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30692
Published: 2021-09-08
Description: An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30693
Published: 2021-09-08
Description: A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30694
Published: 2021-09-08
Description: An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30695
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30696
Published: 2021-09-08
Description: An attacker in a privileged network position may be able to misrepresent application state. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A logic issue was addressed with improved state management.
CVSS Score: 5.9 (MEDIUM)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30697
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local user may be able to leak sensitive user information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30698
Published: 2021-09-08
Description: A null pointer dereference was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Safari 14.1.1, iOS 14.6 and iPadOS 14.6. A remote attacker may be able to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212534
CVE: CVE-2021-30699
Published: 2021-09-08
Description: A window management issue was addressed with improved state management. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be able to view restricted content from the lockscreen.
CVSS Score: 4.6 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212528
CVE: CVE-2021-30700
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted image may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532
CVE: CVE-2021-30701
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30702
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A person with physical access to a Mac may be able to bypass Login Window.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30703
Published: 2021-09-08
Description: A double free issue was addressed with improved memory management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532
CVE: CVE-2021-30704
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30705
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted ASTC file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30706
Published: 2021-09-08
Description: Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. This issue was addressed with improved checks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532
CVE: CVE-2021-30707
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532
CVE: CVE-2021-30708
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30709
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30710
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A malicious application may cause a denial of service or potentially disclose memory contents.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30712
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30713
Published: 2021-09-08
Description: A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: http://seclists.org/fulldisclosure/2021/Sep/40; https://support.apple.com/en-us/HT212529; https://support.apple.com/kb/HT212805
CVE: CVE-2021-30714
Published: 2021-09-08
Description: A race condition was addressed with improved state handling. This issue is fixed in iOS 14.6 and iPadOS 14.6. An application may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-362
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212528
CVE: CVE-2021-30715
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted message may lead to a denial of service.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30716
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An attacker in a privileged network position may be able to perform denial of service.
CVSS Score: 5.9 (MEDIUM)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30717
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An attacker in a privileged network position may be able to execute arbitrary code.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30718
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A non-privileged user may be able to modify restricted settings.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212529
CVE: CVE-2021-30719
Published: 2021-09-08
Description: A local user may be able to cause unexpected system termination or read kernel memory. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. An out-of-bounds read issue was addressed by removing the vulnerable code.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212529
CVE: CVE-2020-24672
Published: 2021-09-08
Description: A vulnerability in Base Software for SoftControl allows an attacker to insert and run arbitrary code in a computer running the affected product. This issue affects: .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345, CWE-862, CWE-20
References: https://search.abb.com/library/Download.aspx?DocumentID=2PAA122974&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=2PAA122974&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2021-21897
Published: 2021-09-08
Description: A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-191, CWE-787
References: https://lists.debian.org/debian-lts-announce/2022/06/msg00008.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BUOTYU3KKIYE4BEBUFA4MRS462P3OWM/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA4C4X5GMM65VYLUW7Q7YL6P5NDB633A/
CVE: CVE-2021-35526
Published: 2021-09-08
Description: Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows attacker to gain access to sensitive information. This issue affects: Hitachi ABB Power Grids System Data Manager – SDM600 1.2 versions prior to FP2 HF6 (Build Nr. 1.2.14002.257).
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-312, CWE-863
References: https://search.abb.com/library/Download.aspx?utm_campaign=&utm_content=2021.08_5051_Cybersecurity%20Advisory%3A&utm_medium=email&utm_source=Eloqua&DocumentID=9AKK107992A4700&LanguageCode=en&DocumentPartId=&Action=Launch&elqTrackId=ba79ef3d8aec4a4fad6c0cbe06d33d6c&elq=1bda419954724e908db108def16646a5&elqaid=3638&elqat=1&elqCampaignId=; https://us-cert.cisa.gov/ics/advisories/icsa-21-250-02; https://search.abb.com/library/Download.aspx?utm_campaign=&utm_content=2021.08_5051_Cybersecurity%20Advisory%3A&utm_medium=email&utm_source=Eloqua&DocumentID=9AKK107992A4700&LanguageCode=en&DocumentPartId=&Action=Launch&elqTrackId=ba79ef3d8aec4a4fad6c0cbe06d33d6c&elq=1bda419954724e908db108def16646a5&elqaid=3638&elqat=1&elqCampaignId=
CVE: CVE-2021-21103
Published: 2021-09-08
Description: Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb21-24.html; https://helpx.adobe.com/security/products/illustrator/apsb21-24.html
CVE: CVE-2021-21104
Published: 2021-09-08
Description: Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb21-24.html; https://helpx.adobe.com/security/products/illustrator/apsb21-24.html
CVE: CVE-2021-21105
Published: 2021-09-08
Description: Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb21-24.html; https://helpx.adobe.com/security/products/illustrator/apsb21-24.html
CVE: CVE-2021-28566
Published: 2021-09-08
Description: Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated attacker. Access to the admin console is required for successful exploitation.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://helpx.adobe.com/security/products/magento/apsb21-30.html; https://helpx.adobe.com/security/products/magento/apsb21-30.html
CVE: CVE-2021-28567
Published: 2021-09-08
Description: Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Improper Authorization vulnerability in the customers module. Successful exploitation could allow a low-privileged user to modify customer data. Access to the admin console is required for successful exploitation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285, CWE-863
References: https://helpx.adobe.com/security/products/magento/apsb21-30.html; https://helpx.adobe.com/security/products/magento/apsb21-30.html
CVE: CVE-2021-28568
Published: 2021-09-08
Description: Adobe Genuine Services version 7.1 (and earlier) is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability to achieve privilege escalation in the context of the current user.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-379, CWE-668
References: https://helpx.adobe.com/security/products/integrity_service/apsb21-27.html; https://helpx.adobe.com/security/products/integrity_service/apsb21-27.html
CVE: CVE-2021-28569
Published: 2021-09-08
Description: Adobe Media Encoder version 15.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/media-encoder/apsb21-32.html; https://helpx.adobe.com/security/products/media-encoder/apsb21-32.html
CVE: CVE-2021-28571
Published: 2021-09-08
Description: Adobe After Effects version 18.1 (and earlier) is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 8.3 (HIGH)
CWE: CWE-78
References: https://helpx.adobe.com/ee/security/products/after_effects/apsb21-33.html; https://helpx.adobe.com/ee/security/products/after_effects/apsb21-33.html