Vulnerabilities > Adobe > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-08-24 CVE-2021-28633 Exposure of Resource to Wrong Sphere vulnerability in Adobe Creative Cloud Desktop Application 2.4
Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability.
low complexity
adobe CWE-668
6.1
2021-08-24 CVE-2021-28600 Out-of-bounds Read vulnerability in Adobe After Effects
Adobe After Effects version 18.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file.
local
low complexity
adobe CWE-125
5.5
2021-08-24 CVE-2021-28601 NULL Pointer Dereference vulnerability in Adobe After Effects
Adobe After Effects version 18.2 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file.
local
low complexity
adobe CWE-476
5.5
2021-08-24 CVE-2021-28615 Out-of-bounds Read vulnerability in Adobe After Effects
Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file.
local
low complexity
adobe CWE-125
5.5
2021-08-24 CVE-2021-28625 Cross-site Scripting vulnerability in Adobe Experience Manager
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.
network
low complexity
adobe CWE-79
6.1
2021-08-24 CVE-2021-28628 Cross-site Scripting vulnerability in Adobe Experience Manager
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.
network
low complexity
adobe CWE-79
6.1
2021-08-20 CVE-2021-28593 Unspecified vulnerability in Adobe Illustrator
Adobe Illustrator version 25.2.3 (and earlier) is affected by a Use After Free vulnerability when parsing a specially crafted file.
local
low complexity
adobe
5.5
2021-08-20 CVE-2021-35984 NULL Pointer Dereference vulnerability in Adobe Acrobat DC and Acrobat Reader DC
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereference vulnerability.
network
low complexity
adobe CWE-476
6.5
2021-08-20 CVE-2021-35985 NULL Pointer Dereference vulnerability in Adobe Acrobat DC and Acrobat Reader DC
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereference vulnerability.
local
low complexity
adobe CWE-476
5.5
2021-08-20 CVE-2021-36008 Use After Free vulnerability in Adobe Illustrator
Adobe Illustrator version 25.2.3 (and earlier) is affected by an Use-after-free vulnerability when parsing a specially crafted file.
local
low complexity
adobe CWE-416
5.5