Vulnerabilities > Adobe > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-08-24 CVE-2021-28633 Exposure of Resource to Wrong Sphere vulnerability in Adobe Creative Cloud Desktop Application 2.4
Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability.
low complexity
adobe CWE-668
6.1
2021-08-24 CVE-2021-28601 Unspecified vulnerability in Adobe After Effects
Adobe After Effects version 18.2 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file.
local
low complexity
adobe
5.5
2021-08-24 CVE-2021-28625 Cross-site Scripting vulnerability in Adobe Experience Manager
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.
network
low complexity
adobe CWE-79
6.1
2021-08-24 CVE-2021-28628 Cross-site Scripting vulnerability in Adobe Experience Manager
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.
network
low complexity
adobe CWE-79
6.1
2021-08-20 CVE-2021-28593 Unspecified vulnerability in Adobe Illustrator
Adobe Illustrator version 25.2.3 (and earlier) is affected by a Use After Free vulnerability when parsing a specially crafted file.
local
low complexity
adobe
5.5
2021-08-20 CVE-2021-35984 Unspecified vulnerability in Adobe Acrobat DC and Acrobat Reader DC
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereference vulnerability.
network
low complexity
adobe
6.5
2021-08-20 CVE-2021-35985 Unspecified vulnerability in Adobe Acrobat DC and Acrobat Reader DC
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereference vulnerability.
local
low complexity
adobe
5.5
2021-08-20 CVE-2021-36008 Unspecified vulnerability in Adobe Illustrator
Adobe Illustrator version 25.2.3 (and earlier) is affected by an Use-after-free vulnerability when parsing a specially crafted file.
local
low complexity
adobe
5.5
2021-06-28 CVE-2021-28597 Exposure of Resource to Wrong Sphere vulnerability in Adobe Photoshop Elements
Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability.
local
low complexity
adobe CWE-668
5.5
2021-06-28 CVE-2021-28623 Exposure of Resource to Wrong Sphere vulnerability in Adobe Premiere Elements 3.0.0/5.2
Adobe Premiere Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability.
local
low complexity
adobe CWE-668
5.5