Vulnerabilities > Adobe > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-28 CVE-2023-26331 Unspecified vulnerability in Adobe Dimension 3.4.3/3.4.6/3.4.7
Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
local
low complexity
adobe
7.8
2023-03-28 CVE-2023-26332 Unspecified vulnerability in Adobe Dimension 3.4.3/3.4.6/3.4.7
Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
local
low complexity
adobe
7.8
2023-03-28 CVE-2023-26333 Unspecified vulnerability in Adobe Dimension 3.4.3/3.4.6/3.4.7
Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.
local
low complexity
adobe
7.8
2023-03-27 CVE-2023-22247 Unspecified vulnerability in Adobe Commerce and Magento Open Source
Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read.
network
low complexity
adobe
7.5
2023-03-27 CVE-2023-25869 Out-of-bounds Read vulnerability in Adobe Substance 3D Stager
Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.
local
low complexity
adobe CWE-125
7.8
2023-03-23 CVE-2023-26360 Unspecified vulnerability in Adobe Coldfusion 2018/2021
Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user.
network
low complexity
adobe
8.6
2023-03-22 CVE-2023-26358 Unspecified vulnerability in Adobe Creative Cloud
Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways.
local
low complexity
adobe
7.8
2023-02-17 CVE-2023-22229 Unspecified vulnerability in Adobe Bridge 12.0.1/13.0.0
Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe
7.8
2023-02-17 CVE-2023-22244 Use After Free vulnerability in Adobe Premiere Rush
Adobe Premiere Rush version 2.6 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-416
7.8
2023-01-27 CVE-2023-22241 Out-of-bounds Write vulnerability in Adobe products
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-787
7.8