Vulnerabilities > Adobe > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-04-12 | CVE-2017-3007 | Untrusted Search Path vulnerability in Adobe Creative Cloud Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used to find resources, related to Creative Cloud desktop applications. | 7.8 |
| 2017-04-12 | CVE-2017-3006 | Incorrect Permission Assignment for Critical Resource vulnerability in Adobe Creative Cloud Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications. | 8.8 |
| 2017-04-12 | CVE-2017-3005 | Unquoted Search Path or Element vulnerability in Adobe Photoshop CC Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability. | 7.8 |
| 2017-04-12 | CVE-2017-3004 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Adobe Photoshop CC Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. | 7.8 |
| 2017-03-31 | CVE-2017-3009 | Out-of-bounds Read vulnerability in Adobe products Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow vulnerability in the JPEG2000 parser. | 7.5 |
| 2017-03-14 | CVE-2017-3003 | Use After Free vulnerability in Adobe Flash Player Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. | 8.8 |
| 2017-03-14 | CVE-2017-3002 | Use After Free vulnerability in Adobe Flash Player Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. | 8.8 |
| 2017-03-14 | CVE-2017-3001 | Use After Free vulnerability in Adobe Flash Player Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. | 8.8 |
| 2017-03-14 | CVE-2017-2999 | Out-of-bounds Write vulnerability in Adobe Flash Player Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. | 8.8 |
| 2017-03-14 | CVE-2017-2998 | Out-of-bounds Write vulnerability in Adobe Flash Player Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. | 8.8 |