Vulnerabilities > Adobe

DATE CVE VULNERABILITY TITLE RISK
2024-04-11 CVE-2024-20796 Out-of-bounds Read vulnerability in Adobe Animate
Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
local
low complexity
adobe CWE-125
5.5
2024-04-11 CVE-2024-20797 Out-of-bounds Read vulnerability in Adobe Animate
Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.
local
low complexity
adobe CWE-125
7.8
2024-04-11 CVE-2024-20798 Out-of-bounds Read vulnerability in Adobe Illustrator
Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
local
low complexity
adobe CWE-125
5.5
2024-04-10 CVE-2024-20766 Out-of-bounds Read vulnerability in Adobe Indesign
InDesign Desktop versions 18.5.1, 19.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
local
low complexity
adobe CWE-125
5.5
2024-03-18 CVE-2024-20754 Unspecified vulnerability in Adobe Lightroom 5.1
Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe
7.8
2024-03-18 CVE-2024-26050 Unspecified vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker to inject malicious scripts into vulnerable form fields.
network
low complexity
adobe
4.8
2024-03-18 CVE-2024-26051 Unspecified vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.
network
low complexity
adobe
5.4
2024-03-18 CVE-2024-26119 Unspecified vulnerability in Adobe Experience Manager
Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass.
network
low complexity
adobe
5.3
2024-03-18 CVE-2024-20767 Unspecified vulnerability in Adobe Coldfusion 2021/2023
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read.
network
high complexity
adobe
7.4
2024-02-15 CVE-2024-20717 Unspecified vulnerability in Adobe Commerce 2.4.4/2.4.5/2.4.6
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
network
low complexity
adobe
5.4