Adobe Security Updates — April 2023

Tuesday, 11 April 2023

Vulnerabilities: 56
Critical: 0
High: 39
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

All vulnerabilities 56

High39 Show

High 7.8
CVE-2023-21582 ZDI-CAN-18255: Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
High 7.8
CVE-2023-22235 Adobe InCopy SVG file Use After Free Arbitrary code execution
High 7.8
CVE-2023-26371 Validate Your Inputs | Out-of-bounds Read (CWE-125)
High 7.8
CVE-2023-26372 ZDI-CAN-20284: Adobe Dimension USDZ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
High 7.8
CVE-2023-26373 Adobe Dimension has an arbitrary address write vulnerability when parsing USDZ files
High 7.8
CVE-2023-26383 ZDI-CAN-20287: Adobe Substance 3D Stager USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
High 7.8
CVE-2023-26384 ZDI-CAN-20279: Adobe Substance 3D Stager USD File Parsing Use-After-Free Remote Code Execution Vulnerability
High 7.8
CVE-2023-26388 ZDI-CAN-20286: Adobe Substance 3D Stager USDZ File Parsing Memory Corruption Remote Code Execution Vulnerability
High 7.8
CVE-2023-26389 ZDI-CAN-20258: Adobe Substance 3D Stager USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
High 7.8
CVE-2023-26390 ZDI-CAN-20255: Adobe Substance 3D Stager USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
High 7.8
CVE-2023-26391 ZDI-CAN-20256: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
High 7.8
CVE-2023-26392 ZDI-CAN-20235: Adobe Substance 3D Stager USD File Parsing Use-After-Free Remote Code Execution Vulnerability
High 7.8
CVE-2023-26393 ZDI-CAN-20234: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
High 7.8
CVE-2023-26394 ZDI-CAN-20236: Adobe Substance 3D Stager USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
High 7.8
CVE-2023-26395 Adobe Acrobat parsing PDF Out-of-bounds Write Arbitrary code execution
EPSS 2.1%
High 7.8
CVE-2023-26396 Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability.
EPSS 4%
High 7.8
CVE-2023-26398 ZDI-CAN-20310: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
High 7.8
CVE-2023-26402 ZDI-CAN-20237: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
High 7.8
CVE-2023-26405 ZDI-CAN-20712: Object Prototype pollution which leads to API Restrictions Bypass
EPSS 4.3%
High 7.8
CVE-2023-26406 ZDI-CAN-20712: Net.HTTP.request URL restriction bypass
EPSS 4.2%
High 7.8
CVE-2023-26407 ZDI-CAN-20712: Net.HTTP.request Arbitrary Command Execution
EPSS 4.3%
High 7.8
CVE-2023-26408 ZDI-CAN-20712: AnnotsString Object prototype pollution Restrictions Bypass Vulnerability
EPSS 4.3%
High 7.8
CVE-2023-26409 ZDI-CAN-20313: Adobe Substance 3D Designer USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
High 7.8
CVE-2023-26410 ZDI-CAN-20309: Adobe Substance 3D Designer USD File Parsing Use-After-Free Remote Code Execution Vulnerability
High 7.8
CVE-2023-26411 ZDI-CAN-20312: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
High 7.8
CVE-2023-26412 ZDI-CAN-20314: Adobe Substance 3D Designer USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
High 7.8
CVE-2023-26413 ZDI-CAN-20315: Adobe Substance 3D Designer USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
High 7.8
CVE-2023-26414 ZDI-CAN-20316: Adobe Substance 3D Designer USD File Parsing Use-After-Free Remote Code Execution Vulnerability
High 7.8
CVE-2023-26415 ZDI-CAN-20317: Adobe Substance 3D Designer DAE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
High 7.8
CVE-2023-26416 ZDI-CAN-20318: Adobe Substance 3D Designer DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
High 7.8
CVE-2023-26417 ZDI-CAN-20583: Adobe Acrobat Reader DC Popup Use-After-Free Remote Code Execution Vulnerability
EPSS 2.6%
High 7.8
CVE-2023-26418 ZDI-CAN-20311: Adobe Acrobat Reader DC AcroForm exportAsFDFStr Use-After-Free Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2023-26419 ZDI-CAN-20274: Adobe Acrobat Reader DC AcroForm removeField Use-After-Free Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2023-26420 ZDI-CAN-20227: Adobe Acrobat Reader DC AcroForm addField Use-After-Free Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2023-26421 ZDI-CAN-19832: Adobe Acrobat Reader DC Doc Object Integer Underflow Remote Code Execution Vulnerability
EPSS 4.6%
High 7.8
CVE-2023-26422 ZDI-CAN-20176: Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability
EPSS 3.1%
High 7.8
CVE-2023-26423 ZDI-CAN-20160: Adobe Acrobat Reader DC AcroForm insertItemAt Use-After-Free Remote Code Execution Vulnerability
EPSS 3.1%
High 7.8
CVE-2023-26424 ZDI-CAN-19833: Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2023-26425 ZDI-CAN-19854: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability
EPSS 2.6%

Medium17 Show