Vulnerabilities > Adobe > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-15 CVE-2023-22248 Incorrect Authorization vulnerability in Adobe Commerce and Magento
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass.
network
low complexity
adobe CWE-863
7.5
2023-06-15 CVE-2023-29297 Unspecified vulnerability in Adobe Commerce and Magento
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker.
network
low complexity
adobe
7.2
2023-05-11 CVE-2023-29273 Out-of-bounds Read vulnerability in Adobe Substance 3D Painter
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.
local
low complexity
adobe CWE-125
7.8
2023-05-11 CVE-2023-29274 Out-of-bounds Read vulnerability in Adobe Substance 3D Painter
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.
local
low complexity
adobe CWE-125
7.8
2023-05-11 CVE-2023-29275 Out-of-bounds Read vulnerability in Adobe Substance 3D Painter
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.
local
low complexity
adobe CWE-125
7.8
2023-05-11 CVE-2023-29276 Out-of-bounds Write vulnerability in Adobe Substance 3D Painter
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-787
7.8
2023-05-11 CVE-2023-29278 Access of Uninitialized Pointer vulnerability in Adobe Substance 3D Painter
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-824
7.8
2023-05-11 CVE-2023-29280 Out-of-bounds Read vulnerability in Adobe Substance 3D Painter
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.
local
low complexity
adobe CWE-125
7.8
2023-05-11 CVE-2023-29281 Out-of-bounds Read vulnerability in Adobe Substance 3D Painter
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.
local
low complexity
adobe CWE-125
7.8
2023-05-11 CVE-2023-29282 Out-of-bounds Write vulnerability in Adobe Substance 3D Painter
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-787
7.8