Skip to content
OpenAdvisories

Archive

14 January 2022

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Low 2.5

    Adobe Acrobat Reader Missing Custom Protocols in Warning Message Prompts

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Violation of Secure Design Principles that could lead to a Security feature bypass. Acrobat Reader DC displays a warning message …

  • Low 3.3

    Adobe Reader Out-of-bounds Read Remote Code Execution Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory s…

  • Low 3.1

    Adobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Auth leak vulnerability

    Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain N…

  • Low 3.3
    CVE-2021-44715 EPSS 15%

    Adobe Acrobat Reader DC Out-of-Bounds Read Information Disclosure Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory s…

  • Low 3.1

    Adobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) for Internet Explorer LoadFile NTLMv2 SSO Auth leak vulnerability

    Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain N…

  • Low 3.3

    Adobe Acrobat Reader DC JP2 File Parsing Use-After-Free Information Disclosure Vulnerability

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An atta…

  • Low 3.3

    Adobe Acrobat Pro DC NULL Pointer Dereference could lead to Application-denial-of-service

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vul…

  • Low 3.3

    Adobe Acrobat Pro DC NULL Pointer Dereference could lead to Application-denial-of-service

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vul…

  • Low 3.3

    Adobe Illustrator TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

    Adobe Illustrator versions 25.4.2 (and earlier) and 26.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…

  • Low 3.3

    Adobe Illustrator JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

    Adobe Illustrator versions 25.4.2 (and earlier) and 26.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…

  • Low 3.3

    Adobe Bridge JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

    Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability…

  • Low 3.3

    Adobe Bridge TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

    Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E…