Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure.


Adobe Flash Player versions 23.0.0.207 and earlier 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling functionality. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 23.0.0.207 and earlier 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy functionality method. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 23.0.0.207 and earlier 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Worker class. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player versions 23.0.0.207 and earlier 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetConnection class when handling the proxy types. Successful exploitation could lead to arbitrary code execution.


Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .


Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior which may allow arbitrary code execution. Mat Powell Ziad Badawi and Natnael Samson working with Trend Micro's Zero Day Initiative reported these vulnerabilities to NCCIC.


An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A specially crafted packet can cause a large memcpy resulting in an access violation and termination of the process. An attacker can send a packet to a device running the GatewayService.exe to trigger this vulnerability. All variants of the CODESYS V3 products in all versions prior V3.5.16.10 containing the CmpRouter or CmpRouterEmbedded component are affected regardless of the CPU type or operating system: CODESYS Control for BeagleBone CODESYS Control for emPC-A/iMX6 CODESYS Control for IOT2000 CODESYS Control for Linux CODESYS Control for PLCnext CODESYS Control for PFC100 CODESYS Control for PFC200 CODESYS Control for Raspberry Pi CODESYS Control RTE V3 CODESYS Control RTE V3 (for Beckhoff CX) CODESYS Control Win V3 (also part of the CODESYS Development System setup) CODESYS Control V3 Runtime System Toolkit CODESYS V3 Embedded Target Visu Toolkit CODESYS V3 Remote Target Visu Toolkit CODESYS V3 Safety SIL2 CODESYS Edge Gateway V3 CODESYS Gateway V3 CODESYS HMI V3 CODESYS OPC Server V3 CODESYS PLCHandler SDK CODESYS V3 Simulation Runtime (part of the CODESYS Development System).


An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest affecting VMware host.


An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled visiting a malicious site can also trigger the vulnerability.


Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashed process belongs to by reading /proc/pid through get_pid_info() in data/apport. An unprivileged user could exploit this to read information about a privileged running process by exploiting PID recycling. This information could then be used to obtain ASLR offsets for a process with an existing memory corruption vulnerability. The initial fix introduced regressions in the Python Apport library due to a missing argument in Report.add_proc_environ in apport/report.py. It also caused an autopkgtest failure when reading /proc/pid and with Python 2 compatibility by reading /proc maps. The initial and subsequent regression fixes are in 2.20.11-0ubuntu16 2.20.11-0ubuntu8.6 2.20.9-0ubuntu7.12 2.20.1-0ubuntu2.22 and 2.14.1-0ubuntu3.29+esm3.


The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 Server 2003 SP2 Vista SP2 and Server 2008 SP2 does not properly handle objects in memory which allows local users to gain privileges via a crafted application aka \CSRSS Memory Corruption Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate addresses which allows local users to gain privileges via a crafted application aka \Win32k Memory Corruption Vulnerability.\


Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious XML file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious png file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe After Effects version 18.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Microsoft Outlook Memory Corruption Vulnerability


Acrobat Reader DC versions versions 2021.001.20150 (and earlier) 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Microsoft Edge (HTML-based) Memory Corruption Vulnerability


Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Scripting Engine Memory Corruption Vulnerability


Adobe Prelude version 10.0 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Adobe Premiere Pro version 15.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Adobe After Effects version 18.2.1 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


A vulnerability has been identified in Simcenter Femap V2020.2 (All versions) Simcenter Femap V2021.1 (All versions). Affected application contains a memory corruption vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14757)


A vulnerability has been identified in Simcenter Femap V2020.2 (All versions) Simcenter Femap V2021.1 (All versions). Affected application contains a memory corruption vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14645 ZDI-CAN-15305 ZDI-CAN-15589 ZDI-CAN-15599)


Adobe Character Animator version 4.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Media Encoder version 15.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Adobe Illustrator version 25.2.3 (and earlier) is affected by an memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Adobe Animate version 21.0.3 (and earlier) is affected by a Memory Corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Acrobat Reader DC versions versions 2020.013.20074 (and earlier) 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file


Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


A memory corruption vulnerability exists in the DMG File Format Handler functionality of PowerISO 7.9. A specially crafted DMG file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. The vendor fixed it in a bug-release of the current version.


A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.


Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Acrobat Reader DC versions versions 2020.013.20074 (and earlier) 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Chakra Scripting Engine Memory Corruption Vulnerability


Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PSD file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42 Kernel 5.1 before 05.16.42 Kernel 5.2 before 05.26.42 Kernel 5.3 before 05.35.42 Kernel 5.4 before 05.42.51 and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.


Adobe Animate version 21.0.9 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Media Encoder version 15.4.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.


Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PNG file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file.


Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EPS/TIFF file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23 5.2 before 05.26.23 5.3 before 05.35.23 5.4 before 05.43.22 and 5.5 before 05.51.22. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.


Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EXR file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08 5.2 through 2021-11-08 and 5.3 through 2021-11-08. A StorageSecurityCommandDxe SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.


Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe InCopy version 16.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


SAP

NetWeaver

AS

ABAP

and

ABAP

Platform

versions

KERNEL

allows

an

attacker

to

send

overlong

content

in

the

RFC

request

type

thereby

crashing

the

corresponding

work

process

because

of

memory

corruption

vulnerability.

The

work

process

will

attempt

to

restart

itself

after

the

crash

and

hence

the

impact

on

the

availability

is

low.


Scripting Engine Memory Corruption Vulnerability


Windows Scripting Engine Memory Corruption Vulnerability


Internet Explorer Memory Corruption Vulnerability


A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019 2020 2021 2022 may lead to code execution through maliciously crafted DLL files.


Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a WAF file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe After Effects version 18.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .m4a file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a SVG file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a WAV file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Media Encoder version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .svg file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


A malicious crafted dwf file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.


Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .m4a file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe After Effects version 18.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .m4a file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe Animate version 21.0.9 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .psd file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version.


Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious psd file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SGI file in the DoReadContinue function potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Media Encoder version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.


Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.


win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input which allows local users to gain privileges via a crafted application aka \Win32k Memory Corruption Vulnerability.\


The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the server connects with a malicious client crafted client requests can remotely trigger this vulnerability.


A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.


A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process.


An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.


An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.


A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022 2021 2020 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files.


A malicious crafted .dwf file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current proces.


A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022.


A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.


A memory corruption vulnerability exists in the netserver parse_command_list functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to an out-of-bounds write. An attacker can send an HTTP request to trigger this vulnerability.


A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution. An attacker can send a specific .TGA file to trigger this vulnerability.


An memory corruption vulnerability exists in the .PCX parsing functionality of Computerinsel Photoline 20.02. A specially crafted .PCX file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .PCX file to trigger this vulnerability.


A vulnerability exists when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability.\ This CVE ID is unique from CVE-2017-0227 and CVE-2017-0240.


Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site aka \Microsoft Browser Memory Corruption Vulnerability.\ This vulnerability is different from those described in CVE-2017-0011 CVE-2017-0017 CVE-2017-0065 and CVE-2017-0068.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private JPEG data. Successful exploitation could lead to arbitrary code execution.


ChakraCore and Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 and Microsoft Edge and Internet Explorer in Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text output. Successful exploitation could lead to arbitrary code execution.


An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists which could lead to disclosure of memory addresses.


ChakraCore allows an attacker to gain the same user rights as the current user due to the way that the ChakraCore scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data representing icons. Successful exploitation could lead to arbitrary code execution.


ChakraCore and Microsoft Edge in Windows 10 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 and CVE-2017-11871.


ChakraCore and Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 R2 and Microsoft Edge and Internet Explorer in Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to bitmap transformations. Successful exploitation could lead to arbitrary code execution.


Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service Pack 2 Microsoft Office 2013 Service Pack 1 and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11884.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 R2 Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how Internet Explorer handles objects in memory aka \Internet Explorer Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11855.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to block transfer of pixels. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing an invalid Enhanced Metafile Format (EMF) record. Successful exploitation could lead to arbitrary code execution.


Internet

Explorer

in

Microsoft

Windows

Windows

Server

and

Windows

and

Windows

RT

Windows

Server

and

Windows

Gold

and

Windows

Server

allows

an

attacker

to

gain

the

same

user

rights

as

the

current

user

due

to

how

Internet

Explorer

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data interpreted as a GIF image. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 parsing module. Successful exploitation could lead to arbitrary code execution.


An issue was discovered in Adobe DNG Converter 9.12.1 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing module. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF color map data. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to pixel block transfer. Successful exploitation could lead to arbitrary code execution.


ChakraCore and Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data and the embedded TIF image. Successful exploitation could lead to arbitrary code execution.


ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


An issue was discovered in Adobe Shockwave 12.2.9.199 and earlier. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal handling of UTF-16 literal strings. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Adobe Graphics Manager module. Successful exploitation could lead to arbitrary code execution.


An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists which could lead to disclosure of memory addresses.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) image stream data. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) engine. Successful exploitation could lead to arbitrary code execution.


ChakraCore

and

Internet

Explorer

in

Microsoft

Windows

Windows

Server

and

Windows

and

Windows

RT

Windows

Server

and

and

Internet

Explorer

and

Microsoft

Edge

in

Windows

Gold

and

Windows

Server

allows

an

attacker

to

gain

the

same

user

rights

as

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data and the embedded GIF image. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to transfer of pixel blocks. Successful exploitation could lead to arbitrary code execution.


Microsoft

Edge

in

Windows

Gold

Windows

Server

and

Windows

Server

version

allows

an

attacker

to

take

control

of

an

affected

system

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to drawing of Unicode text strings. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image processing engine when processing JPEG 2000 (JP2) code stream data. Successful exploitation could lead to arbitrary code execution.


ChakraCore and Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 R2 and Microsoft Edge and Internet Explorer in Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to transformation of blocks of pixels. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 engine. Successful exploitation could lead to arbitrary code execution.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how Internet Explorer handles objects in memory aka \Internet Explorer Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11856.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing JPEG 2000 (JP2) code stream data. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal data structure manipulation related to document encoding. Successful exploitation could lead to arbitrary code execution.


ChakraCore

and

Internet

Explorer

in

Microsoft

Windows

Windows

Server

Windows

and

Windows

RT

Windows

Server

and

Internet

Explorer

and

Microsoft

Edge

in

Windows

Gold

and

Windows

Server

allows

an

attacker

to

gain

the

same

user

rights

as

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Adobe Graphics Manager (AGM) module. Successful exploitation could lead to arbitrary code execution.


ChakraCore and Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 R2 and Microsoft Edge and Internet Explorer in Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


ChakraCore

and

Microsoft

Edge

in

Windows

Gold

and

Windows

Server

allows

an

attacker

to

gain

the

same

user

rights

as

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF data related to the way how the components of each pixel are stored. Successful exploitation could lead to arbitrary code execution.


Microsoft Excel 2007 Service Pack 3 Microsoft Excel 2010 Service Pack 2 Microsoft Excel 2013 Service Pack 1 Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2016 Microsoft Office Compatibility Pack Service Pack 3 and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory aka \Microsoft Excel Memory Corruption Vulnerability\.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data interpreted as JPEG data. Successful exploitation could lead to arbitrary code execution.


An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.


Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to curve drawing. Successful exploitation could lead to arbitrary code execution.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 and Microsoft Edge and Internet Explorer in Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how Microsoft browsers handle objects in memory aka \Microsoft Browser Memory Corruption Vulnerability\.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when reading a JPEG file embedded within XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to line segments. Successful exploitation could lead to arbitrary code execution.


ChakraCore

and

Microsoft

Edge

in

Windows

and

Windows

Server

allows

an

attacker

to

gain

the

same

user

rights

as

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


ChakraCore and Microsoft Edge in Windows 10 1703 1709 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11871 and CVE-2017-11873.


ChakraCore and Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing JPEG data. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing where the font is embedded in the XML Paper Specification (XPS) file. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text strings. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution.


Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory aka \Microsoft Office Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11882.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to rendering a path. Successful exploitation could lead to arbitrary code execution.


ChakraCore and Microsoft Edge in Windows 10 1703 1709 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 and CVE-2017-11873.


ChakraCore and Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


Internet

Explorer

in

Microsoft

Windows

Windows

Server

and

Windows

and

Windows

RT

Windows

Server

and

Windows

Gold

Windows

Server

and

Windows

Server

version

allows

an

attacker

to

gain

the

same

user

rights

as

the

current

user

due

to

how

Microsoft

browsers

handle

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


ChakraCore and Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 and Microsoft Edge and Internet Explorer in Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how Microsoft browsers handle objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions 2017.011.30066 and earlier versions 2015.006.30355 and earlier versions and 11.0.22 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.


Microsoft Word 2007 Service Pack 3 Microsoft Word 2010 Service Pack 2 Microsoft Office 2010 Service Pack 2 and Microsoft Office Compatibility Pack Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory aka \Microsoft Word Memory Corruption Vulnerability\.


Internet

Explorer

in

Microsoft

Windows

Windows

Server

Windows

and

Windows

RT

Windows

Server

and

Windows

Gold

and

Windows

Server

allows

an

attacker

to

gain

the

same

user

rights

as

the

current

user

due

to

how

Internet

Explorer

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to drawing ASCII text string. Successful exploitation could lead to arbitrary code execution.


ChakraCore

and

Internet

Explorer

in

Microsoft

Windows

Windows

Server

and

Windows

and

Windows

RT

Windows

Server

and

and

and

Internet

Explorer

adn

Microsoft

Edge

in

Windows

Gold

and

Windows

Server

allows

an

attacker

to

gain

the

same

user

rights

as

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to take control of an affected system due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11861 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


Microsoft Edge in Windows 10 1607 1703 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to gain the same user rights as the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11836 CVE-2017-11837 CVE-2017-11838 CVE-2017-11839 CVE-2017-11840 CVE-2017-11841 CVE-2017-11843 CVE-2017-11846 CVE-2017-11858 CVE-2017-11859 CVE-2017-11862 CVE-2017-11866 CVE-2017-11869 CVE-2017-11870 CVE-2017-11871 and CVE-2017-11873.


An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists which could lead to disclosure of memory addresses.


An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.


An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption which can potentially lead to arbitrary code execution. An attacker can send a specific .SVG file to trigger this vulnerability.


An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability.


An exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality of LabVIEW 2017 LabVIEW 2016 LabVIEW 2015 and LabVIEW 2014. A specially crafted Virtual Instrument (VI) file can cause an attacker controlled looping condition resulting in an arbitrary null write. An attacker controlled VI file can be used to trigger this vulnerability and can potentially result in code execution.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine related to handling of the color profile in a TIFF file. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and organization. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when processing a TIFF image. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module related to JPEG parsing. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing a malformed cross-reference table. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine related to parsing of EXIF metadata. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine related to the parsing of JPEG EXIF metadata. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution.


A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in potential code execution. An attacker can send a specific .PSD file to trigger this vulnerability.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability when parsing crafted TIFF image files. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF images. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine related to TIFF file parsing. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the MakeAccessible plugin when parsing TrueType font data. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data drawing position definition. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability related to internal object representation manipulation. Successful exploitation could lead to arbitrary code execution.


Adobe Photoshop versions CC 2017 (18.0.1) and earlier CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion module related to processing of TIFF files. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) format parser. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JavaScript engine related to string manipulation. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability when parsing TTF (TrueType font format) stream data. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to Bezier curves. Successful exploitation could lead to arbitrary code execution.


Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine related to parsing of GIF files. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine related to manipulation of EMF files. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the font manipulation functionality. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in Acrobat/Reader 11.0.19 engine. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in image conversion related to processing of the PCX (picture exchange) file format. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the picture exchange (PCX) file format parsing module. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 image compression module. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JPEG 2000 engine related to image scaling. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability when parsing font data in the MakeAccessible plugin. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JPEG 2000 code-stream tile functionality. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Enhanced Metafile Format (EMF) parser. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader 2017.009.20058 and earlier 2017.008.30051 and earlier 2015.006.30306 and earlier and 11.0.20 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


Adobe Acrobat Reader versions 11.0.19 and earlier 15.006.30280 and earlier 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine related to parsing of JPEG files. Successful exploitation could lead to arbitrary code execution.


An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.


All versions of VAMPSET software produced by Schneider Electric prior to V2.2.189 are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used. This vulnerability causes the software to halt or not start when trying to open the corrupted file. This vulnerability occurs when fill settings are intentionally malformed and is opened in a standalone state without connection to a protection relay. This attack is not considered to be remotely exploitable. This vulnerability has no effect on the operation of the protection relay to which VAMPSET is connected. As Windows operating system remains operational and VAMPSET responds it is able to be shut down through its normal closing protocol.


ntguard.sys and ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption vulnerability via a 0x83000084 DeviceIoControl request.


In radare 2.0.1 a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c as demonstrated by an invalid free. This error is due to improper sh_size validation when allocating memory.


Internet

Explorer

in

Microsoft

Windows

Windows

Server

Windows

and

Windows

RT

Windows

Server

and

Windows

Gold

and

and

Windows

Server

Internet

Explorer

in

the

way

affected

Microsoft

scripting

engines

render

when

handling

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability.\

This

CVE

ID

is

unique

from

and


ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application aka \ATMFD.DLL Memory Corruption Vulnerability.\


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows local users to gain privileges via a crafted application aka \Windows Kernel Memory Corruption Vulnerability.\


A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry.


A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and gain code execution.


A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.


A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image processed via the application can lead to an out-of-bounds write overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.


A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PSD image processed via the application can lead to a stack overflow overwriting arbitrary data. An attacker can deliver a PSD image to trigger this vulnerability and gain code execution.


Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An authenticated remote attacker can crash the HTTP server by rapidly authenticating and disconnecting.


Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.


Adobe Acrobat and Reader versions 2018.009.20050 and earlier 2017.011.30070 and earlier and 2015.006.30394 and earlier have a Memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.


Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .


A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access potentially resulting in code execution in the context of the current user.


Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .


Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19 and FreeBSD through 11.4 that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.


Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.


A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow an attacker to execute code via crafted Concise Binary Object Representation (CBOR) input to the cbor2json decoder. An uncaught error while decoding CBOR Major Type 3 text strings leads to the use of an attacker-controllable uninitialized stack value. This can be used to modify memory causing a crash or potentially exploitable heap corruption.


An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. A specially crafted pixel shader can cause memory corruption vulnerability. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability potentially could be triggered from guest machines running virtualization environments (ie. VMware qemu VirtualBox etc.) in order to perform guest-to-host escape - as it was demonstrated before (TALOS-2018-0533 TALOS-2018-0568 etc.). Theoretically this vulnerability could be also triggered from web browser (using webGL and webassembly). This vulnerability was triggered from HYPER-V guest using RemoteFX feature leading to executing the vulnerable code on the HYPER-V host (inside of the rdvgm.exe process).


A memory corruption vulnerability exists in the TIFF handle_COMPRESSION_PACKBITS functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause a memory corruption. An attacker can provide a malicious file to trigger this vulnerability.


Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17054.


Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17048.


Microsoft Browser Memory Corruption Vulnerability


Chakra Scripting Engine Memory Corruption Vulnerability


Internet Explorer Memory Corruption Vulnerability


Scripting Engine Memory Corruption Vulnerability


DaviewIndy has a Memory corruption vulnerability triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.


Adobe Acrobat and Reader versions 2020.006.20034 and earlier 2017.011.30158 and earlier 2017.011.30158 and earlier 2015.006.30510 and earlier and 2015.006.30510 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .


Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00 6.10 and 6.11 RSLinx Classic: Version 4.11.00 and prior RSNetWorx software: Version 28.00.00 and prior Studio 5000 Logix Designer software: Version 32 and prior) is vulnerable. A memory corruption vulnerability exists in the algorithm that matches square brackets in the EDS subsystem. This may allow an attacker to craft specialized EDS files to crash the EDSParser COM object leading to denial-of-service conditions.


An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crafted malformed file can trigger an out-of-bounds memory access and modification which results in memory corruption. To trigger this vulnerability the victim needs to access an attacker-provided malformed file.


An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rpl_remove_header in net/rpl/rpl-ext-header.c.


A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability.


An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corruption and potential code execution. An attacker can specially craft a PDF and send to the victim to trigger this vulnerability.


An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in potential memory corruption resulting in code execution. An attacker can send the victim a specific GIF file to trigger this vulnerability.


A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability.


Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


Adobe InDesign version 11.4.1 and earlier Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.


The kernel in Microsoft Windows 2000 SP4 XP SP2 and SP3 Server 2003 SP1 and SP2 Vista Gold and SP1 and Server 2008 does not properly validate parameters sent from user mode to the kernel which allows local users to gain privileges via a crafted application aka \Windows Kernel Memory Corruption Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP1 and SP2 Windows Server 2008 Gold SP2 and R2 and Windows 7 does not properly validate user-mode input which allows local users to gain privileges via a crafted application aka \Win32k Memory Corruption Vulnerability.\


Adobe Photoshop CC 2019 versions 20.0.8 and earlier and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.


A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link.


A memory corruption vulnerability exists in the ioca_mys_rgb_allocate functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to an arbitrary free. An attacker can provide a malicious file to trigger this vulnerability.


A memory corruption vulnerability in Skia that can occur when using transforms to make gradients resulting in a potentially exploitable crash. This vulnerability affects Firefox < 51.


A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory.


A memory corruption vulnerability exists when ezPDF improperly handles the parameter. This vulnerability exists due to insufficient validation of the parameter.


A memory corruption vulnerability was addressed with improved locking. This issue is fixed in watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges.

memory corruption
arbitrary code execution


A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1 watchOS 6 tvOS 13. An application may be able to execute arbitrary code with kernel privileges.


A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15 tvOS 15 watchOS 8 iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.


Microsoft Publisher 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling aka \Publisher Memory Corruption Vulnerability.\


Microsoft Excel 2010 SP2 Excel for Mac 2011 Excel 2016 for Mac and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors aka \Microsoft Edge Memory Corruption Vulnerability.\


Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to how Microsoft Edge handles objects in memory aka \Microsoft Edge Memory Corruption Vulnerability\.


Microsoft Excel Viewer and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Excel Memory Corruption Vulnerability.\


Microsoft Excel 2010 SP2 Excel for Mac 2011 Office Compatibility Pack SP3 and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Excel 2010 SP2 Office Compatibility Pack SP3 and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Excel 2010 SP2 Excel for Mac 2011 and 2016 Office Compatibility Pack SP3 and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Excel for Mac 2011 Office Compatibility Pack SP3 and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Excel 2010 SP2 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Excel 2010 SP2 Office Compatibility Pack SP3 and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Office Compatibility Pack SP3 and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page aka \Internet Explorer Memory Corruption Vulnerability \ a different vulnerability than CVE-2016-3290.


Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page aka \Internet Explorer Memory Corruption Vulnerability \ a different vulnerability than CVE-2016-3288.


Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page aka \Microsoft Browser Memory Corruption Vulnerability \ a different vulnerability than CVE-2016-3322.


Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page aka \Microsoft Browser Memory Corruption Vulnerability \ a different vulnerability than CVE-2016-3289.


Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not initialized or (2) is deleted aka \Layout Memory Corruption Vulnerability.\


Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page aka \Microsoft Browser Memory Corruption Vulnerability.\


An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 14.0.7 x64. A specially crafted BMP file can cause an out-of-bounds memory write allowing a potential attacker to execute arbitrary code on the victim machine. Can trigger this vulnerability by sending the user a specially crafted BMP file.


An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 4.0.7 x64. A specially crafted JPEG file can cause an out-of-bounds memory write allowing an attacker to execute arbitrary code on the victim machine. An attacker could exploit a vulnerability by providing the user with a specially crafted JPEG file.


A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file an attacker could execute arbitrary code.


Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file aka \WPD File Format Memory Corruption Vulnerability.\


The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers which allows remote attackers to execute arbitrary code via a crafted web site aka \VML Memory Corruption Vulnerability.\