Adobe Security Updates — May 2024

Tuesday, 14 May 2024

Vulnerabilities: 37
Critical: 0
High: 26
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

All vulnerabilities 37

High26 Show

High 7.8
CVE-2024-20791 Illustrator 2024 BMP File Parsing Memory Corruption
High 7.8
CVE-2024-20792 Adobe Illustrator TIF File Parsing Use-After-Free Remote memory corruption
High 7.8
CVE-2024-30274 Adobe Substance 3D Painter ABC File Parsing An Out-Of-Bounds Write Vulnerability
High 7.8
CVE-2024-30275 Adobe Aero Beta has an arbitrary code execution vulnerability when parsing svg files
High 7.8
CVE-2024-30282 Adobe Animate 2024 Out of Bound Write Remote Code Execution Vulnerability
High 7.8
CVE-2024-30284 ZDI-CAN-23466: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
EPSS 4.3%
High 7.8
CVE-2024-30288 Adobe FrameMaker 3DS File Parsing Heap Memory Corruption
High 7.8
CVE-2024-30289 Adobe FrameMaker XLS File Parsing Buffer Overflow
High 7.8
CVE-2024-30290 Adobe FrameMaker WEBP File Parsing Out Of Bound Write
High 7.8
CVE-2024-30291 Adobe FrameMaker TIF File parsing Out Of Bound Write
High 7.8
CVE-2024-30292 Adobe FrameMaker GIF File parsing Out Of Bound Write
High 7.8
CVE-2024-30293 Adobe Animate 2024 AI File parsing Stack base buffer overflow Remote Code execution Vulnerability
High 7.8
CVE-2024-30294 Adobe Animate OGG File Parsing Heap Memory Corruption remote code execution Vulnerability
High 7.8
CVE-2024-30295 When Animate parses FLA files, there is a UAF vulnerability caused by referencing uninitialized memory at Animate.exe+0x1149dcf
High 7.8
CVE-2024-30296 When Animate parses FLA files, there is an out-of-bounds write vulnerability at animate+0x123df28
High 7.8
CVE-2024-30297 When Adobe Animate parses FLA files, there is a heap out-of-bounds write vulnerability at Animate.exe+0x125D391
High 7.8
CVE-2024-30307 Adobe Substance 3D Painter BMP File Parsing Out Of Bounds Write Vulnerability
High 7.8
CVE-2024-30310 ZDI-CAN-23327: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
EPSS 2.8%
High 7.8
CVE-2024-30314 Dreamweaver Desktop | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
High 7.8
CVE-2024-34094 ZDI-CAN-23474: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
High 7.8
CVE-2024-34095 ZDI-CAN-23475: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
High 7.8
CVE-2024-34096 ZDI-CAN-23472: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
High 7.8
CVE-2024-34097 ZDI-CAN-23473: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
High 7.8
CVE-2024-34098 ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 1 of 2
High 7.8
CVE-2024-34099 ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 2 of 2
High 7.8
CVE-2024-34100 Use-After-Free vulnerability in the latest Adobe Acrobat Reader DC when open malicious PDF file

Medium11 Show