deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-0168
Published: 2019-12-18
Description: Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-0169
Published: 2019-12-18
Description: Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://cert-portal.siemens.com/productcert/pdf/ssa-398519.pdf
CVE: CVE-2019-11086
Published: 2019-12-18
Description: Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11087
Published: 2019-12-18
Description: Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege, information disclosure or denial of service via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11088
Published: 2019-12-18
Description: Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11090
Published: 2019-12-18
Description: Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; Intel(R) TXE 3.1.70 and 4.0.20; Intel(R) SPS before versions SPS_E5_04.01.04.305.0, SPS_SoC-X_04.00.04.108.0, SPS_SoC-A_04.00.04.191.0, SPS_E3_04.01.04.086.0, SPS_E3_04.08.04.047.0 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11097
Published: 2019-12-18
Description: Improper directory permissions in the installer for Intel(R) Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45,13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11100
Published: 2019-12-18
Description: Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11101
Published: 2019-12-18
Description: Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11102
Published: 2019-12-18
Description: Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11103
Published: 2019-12-18
Description: Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11104
Published: 2019-12-18
Description: Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11105
Published: 2019-12-18
Description: Logic issue in subsystem for Intel(R) CSME before versions 12.0.45, 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11106
Published: 2019-12-18
Description: Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-613
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11107
Published: 2019-12-18
Description: Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11108
Published: 2019-12-18
Description: Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11109
Published: 2019-12-18
Description: Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
References: https://support.f5.com/csp/article/K54164678?utm_source=f5support&amp%3Butm_medium=RSS; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://support.f5.com/csp/article/K54164678?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-11110
Published: 2019-12-18
Description: Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11131
Published: 2019-12-18
Description: Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 9.8 (CRITICAL)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11132
Published: 2019-12-18
Description: Cross site scripting in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow a privileged user to potentially enable escalation of privilege via network access.
CVSS Score: 8.4 (HIGH)
CWE: CWE-79
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-11147
Published: 2019-12-18
Description: Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0, 14.0.10; TXEInfo software for Intel(R) TXE before versions 3.1.70 and 4.0.20; INTEL-SA-00086 Detection Tool version 1.2.7.0 or before; INTEL-SA-00125 Detection Tool version 1.0.45.0 or before may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html
CVE: CVE-2019-18781
Published: 2019-12-18
Description: An open redirect vulnerability was discovered in Zoho ManageEngine ADSelfService Plus 5.x before 5809 that allows attackers to force users who click on a crafted link to be sent to a specified external site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://pitstop.manageengine.com/portal/community/topic/adselfservice-plus-5809-release; https://www.manageengine.com/products/self-service-password/release-notes.html; https://pitstop.manageengine.com/portal/community/topic/adselfservice-plus-5809-release
CVE: CVE-2019-19788
Published: 2019-12-18
Description: Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. By using a service working inside a sandboxed iframe it is possible to bypass the normal sandboxing attributes. This allows an attacker to make forced redirections without any user interaction from a third-party context.
CVSS Score: 5.5 (MEDIUM)
References: https://security.opera.com/bypass-a-restriction-in-ofa-54-opera-security-advisories/; https://security.opera.com/bypass-a-restriction-in-ofa-54-opera-security-advisories/
CVE: CVE-2019-17390
Published: 2019-12-18
Description: An issue was discovered in the Outlook add-in in Pronestor Planner before 8.1.77. There is local privilege escalation in the Health Monitor service because PronestorHealthMonitor.exe access control is mishandled, aka PNB-2359.
CVSS Score: 7.8 (HIGH)
References: http://help.pronestor.com/download/PronestorBooking/ReleaseNotes/ReleaseNotes.htm; https://improsec.com; http://help.pronestor.com/download/PronestorBooking/ReleaseNotes/ReleaseNotes.htm
CVE: CVE-2019-19899
Published: 2019-12-19
Description: Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to block access to instances of java.lang.Class) because getClass is accessible via the public static java.lang.Class java.lang.Class.forName(java.lang.Module,java.lang.String) signature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://github.com/PebbleTemplates/pebble/issues/493; https://github.com/PebbleTemplates/pebble/issues/493
CVE: CVE-2019-15006
Published: 2019-12-19
Description: There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence Data Center communicated with the Companion application via the atlassian-domain-for-localhost-connections-only.com domain name, the DNS A record of which points at 127.0.0.1. Additionally, a signed certificate for the domain was publicly distributed with the Companion application. An attacker in the position to control DNS resolution of their victim could carry out a man-in-the-middle (MITM) attack between Confluence Server (or Confluence Data Center) and the atlassian-domain-for-localhost-connections-only.com domain intended to be used with the Companion application. This certificate has been revoked, however, usage of the atlassian-domain-for-localhost-connections-only.com domain name was still present in Confluence Server and Confluence Data Center. An attacker could perform the described attack by denying their victim access to certificate revocation information, and carry out a man-in-the-middle (MITM) attack to observe files being edited using the Companion application and/or modify them, and access some limited user information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-913
References: http://packetstormsecurity.com/files/155742/Atlassian-Confluence-Man-In-The-Middle.html; https://confluence.atlassian.com/doc/confluence-security-advisory-2019-12-18-982324349.html; https://jira.atlassian.com/browse/CONFSERVER-59244
CVE: CVE-2019-7482
Published: 2019-12-19
Description: Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0017; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0017
CVE: CVE-2019-7483
Published: 2019-12-19
Description: In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0018; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0018; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7483
CVE: CVE-2019-7484
Published: 2019-12-19
Description: Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0019; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0019
CVE: CVE-2019-7485
Published: 2019-12-19
Description: Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0020; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0020
CVE: CVE-2019-7486
Published: 2019-12-19
Description: Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0021; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0021
CVE: CVE-2019-7487
Published: 2019-12-19
Description: Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428, CWE-428
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0022; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0022
CVE: CVE-2019-19900
Published: 2019-12-19
Description: An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying content type names in the content creation interface. An attacker could potentially craft a specialized content type name, then have an editor execute scripting when creating content, aka XSS. This vulnerability is mitigated by the fact that an attacker must have a role with the "Administer content types" permission.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://backdropcms.org/security/backdrop-sa-core-2019-014; https://backdropcms.org/security/backdrop-sa-core-2019-014
CVE: CVE-2019-19901
Published: 2019-12-19
Description: An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying certain block descriptions created by administrators. An attacker could potentially craft a specialized description, then have an administrator execute scripting when configuring a layout, aka XSS. This issue is mitigated by the fact that the attacker would be required to have the permission to create custom blocks, which is typically an administrative task.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://backdropcms.org/security/backdrop-sa-core-2019-013; https://backdropcms.org/security/backdrop-sa-core-2019-013
CVE: CVE-2019-19902
Published: 2019-12-19
Description: An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows the upload of entire-site configuration archives through the user interface or command line. It does not sufficiently check uploaded archives for invalid data, allowing non-configuration scripts to potentially be uploaded to the server. This issue is mitigated by the fact that the attacker would be required to have the "Synchronize, import, and export configuration" permission, a permission that only trusted administrators should be given. Other measures in the product prevent the execution of PHP scripts, so another server-side scripting language must be accessible on the server to execute code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://backdropcms.org/security/backdrop-sa-core-2019-016; https://backdropcms.org/security/backdrop-sa-core-2019-016
CVE: CVE-2019-19903
Published: 2019-12-19
Description: An issue was discovered in Backdrop CMS 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying file type descriptions created by administrators. An attacker could potentially craft a specialized description, then have an administrator execute scripting when viewing the list of file types, aka XSS. This vulnerability is mitigated by the fact that an attacker must have a role with the "Administer file types" permission.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://backdropcms.org/security/backdrop-sa-core-2019-015; https://backdropcms.org/security/backdrop-sa-core-2019-015
CVE: CVE-2019-16444
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have a binary planting (default folder privilege escalation) vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16445
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16446
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16448
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16449
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16450
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html