Vulnerabilities > Adobe > Critical

DATE CVE VULNERABILITY TITLE RISK
2014-05-14 CVE-2014-0522 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Adobe Acrobat and Acrobat Reader
Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0523, CVE-2014-0524, and CVE-2014-0526.
network
low complexity
adobe apple microsoft CWE-119
critical
10.0
2014-05-14 CVE-2014-0513 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Adobe Illustrator
Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote attackers to execute arbitrary code via unspecified vectors.
network
low complexity
adobe CWE-119
critical
10.0
2014-04-29 CVE-2014-0515 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Adobe Flash Player
Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.
network
low complexity
adobe linux apple microsoft CWE-119
critical
10.0
2014-04-15 CVE-2014-0514 Permissions, Privileges, and Access Controls vulnerability in Adobe Reader 11.1.0/11.1.3
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.
network
adobe CWE-264
critical
9.3
2014-04-08 CVE-2014-0507 Buffer Errors vulnerability in Adobe Air, Adobe AIR SDK and Flash Player
Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.
network
adobe apple microsoft linux CWE-119
critical
9.3
2014-03-27 CVE-2014-0512 Permissions, Privileges, and Access Controls vulnerability in Adobe Acrobat Reader 11.0.6
Adobe Reader 11.0.06 allows attackers to bypass a PDF sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.
network
low complexity
adobe CWE-264
critical
10.0
2014-03-27 CVE-2014-0511 Buffer Errors vulnerability in Adobe Acrobat Reader 11.0.6
Heap-based buffer overflow in Adobe Reader 11.0.06 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.
network
low complexity
adobe CWE-119
critical
10.0
2014-03-27 CVE-2014-0510 Buffer Errors vulnerability in Adobe Flash Player 12.0.0.77
Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.
network
low complexity
adobe CWE-119
critical
10.0
2014-03-27 CVE-2014-0506 Resource Management Errors vulnerability in Adobe Flash Player 12.0.0.77
Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.
network
low complexity
adobe microsoft CWE-399
critical
10.0
2014-03-14 CVE-2014-0505 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Adobe Shockwave Player
Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
network
low complexity
adobe CWE-119
critical
10.0