Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Bridge.

CVE-2021-42728 is a stack-based buffer overflow vulnerability identified in Adobe Bridge version 11.1.1 and earlier. The flaw arises from improper handling of specially crafted files by Adobe Bridge, which leads to a stack overflow condition (classified under CWE-120). When a user opens a maliciously crafted file within the application, the vulnerability can be exploited to execute arbitrary code with the privileges of the current user. This means that an attacker could potentially run malicious code, manipulate files, or compromise the system depending on the user's permissions. Exploitation requires direct user interaction, specifically opening the crafted file in Adobe Bridge, which limits the attack vector to social engineering or targeted delivery of malicious files. There are no known public exploits in the wild at this time, and Adobe has not provided a patch link in the provided data, indicating that remediation may require manual mitigation or updates from Adobe. The vulnerability affects all versions up to and including 11.1.1, though exact affected versions are unspecified. Given the nature of Adobe Bridge as a digital asset management tool widely used by creative professionals and enterprises for organizing media files, this vulnerability could be leveraged in targeted attacks against organizations relying on Adobe Bridge for media workflows.

Detailed information about CVE-2021-42728: Buffer Overflow (CWE-120) in Adobe Bridge affecting Adobe Bridge. Get real-time updates, technical details, and mitig

CVE-2021-42728: Buffer Overflow (CWE-120) in Adobe Bridge - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2021-42728: Buffer Overflow (CWE-120) in Adobe Bridge

Adobe Illustrator version 26.0.3 (and earlier) is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Illustrator.

CVE-2022-23187 is a buffer overflow vulnerability (CWE-120) found in Adobe Illustrator version 26.0.3 and earlier. The vulnerability arises from insecure handling of crafted files, which can cause a buffer overflow condition when such a file is opened in Illustrator. This overflow can potentially allow an attacker to execute arbitrary code within the context of the current user. Exploitation requires user interaction, specifically the victim must open a maliciously crafted Illustrator file. There are no known exploits in the wild as of the published date. The vulnerability affects the confidentiality, integrity, and availability of the system by enabling code execution, which could lead to data compromise or system manipulation. However, the attack vector is limited by the need for user action and the scope is confined to systems running vulnerable versions of Adobe Illustrator. No patches or updates are linked in the provided information, indicating that mitigation may rely on vendor updates or workarounds. The vulnerability is classified as medium severity by the vendor, reflecting the balance between potential impact and exploitation complexity.

Detailed information about CVE-2022-23187: Buffer Overflow (CWE-120) in Adobe Illustrator affecting Adobe Illustrator. Get real-time updates, technical details,

CVE-2022-23187: Buffer Overflow (CWE-120) in Adobe Illustrator - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-23187: Buffer Overflow (CWE-120) in Adobe Illustrator

Adobe Photoshop versions 22.5.4 (and earlier) and 23.1 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Photoshop.

CVE-2022-23203 is a buffer overflow vulnerability (CWE-120) identified in Adobe Photoshop versions 22.5.4 and earlier, as well as 23.1 and earlier. This vulnerability arises from insecure handling of specially crafted files by Photoshop, which can lead to a buffer overflow condition. When a user opens a maliciously crafted file in the affected Photoshop versions, the vulnerability can be exploited to execute arbitrary code within the context of the current user. The exploit requires user interaction, specifically opening the crafted file, which means that social engineering or targeted delivery of malicious files is necessary for exploitation. There are no known exploits in the wild reported as of the publication date, and no official patches or updates were linked in the provided information. The vulnerability impacts confidentiality, integrity, and availability by potentially allowing an attacker to execute arbitrary code, which could lead to unauthorized access, data manipulation, or disruption of Photoshop functionality. However, the attack scope is limited to the privileges of the user running Photoshop, and no elevation of privilege or remote exploitation without user interaction is indicated. The vulnerability is classified as medium severity by the source, reflecting the requirement for user interaction and the limited scope of impact compared to more critical remote code execution flaws.

Detailed information about CVE-2022-23203: Buffer Overflow (CWE-120) in Adobe Photoshop affecting Adobe Photoshop. Get real-time updates, technical details, and

CVE-2022-23203: Buffer Overflow (CWE-120) in Adobe Photoshop - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-23203: Buffer Overflow (CWE-120) in Adobe Photoshop

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted malicious file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted malicious file in Illustrator.

CVE-2022-23188 is a buffer overflow vulnerability (CWE-120) identified in Adobe Illustrator versions 25.4.3 and earlier, as well as 26.0.2 and earlier. The vulnerability arises from insecure handling of crafted malicious files by Illustrator, which can lead to a buffer overflow condition. This flaw allows an attacker to potentially execute arbitrary code within the context of the current user. Exploitation requires that the victim opens a specifically crafted malicious file in Adobe Illustrator, meaning user interaction is necessary. The vulnerability affects the confidentiality, integrity, and availability of the affected system by enabling code execution, which could lead to data theft, system compromise, or disruption of normal operations. No public exploits have been reported in the wild to date, and Adobe has not published official patches or updates addressing this vulnerability at the time of this analysis. The vulnerability was reserved in January 2022 and publicly disclosed in February 2022. Given the nature of Adobe Illustrator as a widely used professional graphic design tool, this vulnerability could be leveraged in targeted attacks, especially in environments where Illustrator files are exchanged frequently, such as creative agencies, marketing departments, and media companies.

Detailed information about CVE-2022-23188: Buffer Overflow (CWE-120) in Adobe Illustrator affecting Adobe Illustrator. Get real-time updates, technical details,

CVE-2022-23188: Buffer Overflow (CWE-120) in Adobe Illustrator - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-23188: Buffer Overflow (CWE-120) in Adobe Illustrator

Adobe InDesign versions 16.4 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-42731 is a buffer overflow vulnerability (CWE-120) found in Adobe InDesign versions 16.4 and earlier. The vulnerability occurs during the parsing of specially crafted InDesign files, where improper handling of input data leads to a buffer overflow condition. This flaw allows an unauthenticated attacker to execute arbitrary code within the context of the current user, potentially compromising the affected system. Exploitation requires user interaction, specifically that the victim opens a maliciously crafted InDesign file. Because the vulnerability is triggered by file parsing, it targets the core functionality of Adobe InDesign related to document handling. No known public exploits have been reported in the wild, and no official patches or updates are linked in the provided data, though Adobe typically addresses such vulnerabilities in subsequent releases. The vulnerability impacts confidentiality, integrity, and availability by enabling code execution, which could lead to data theft, system manipulation, or denial of service. However, the need for user interaction and the absence of remote exploitation without user action limit the attack vector to targeted phishing or social engineering campaigns. The vulnerability affects a widely used creative software product, often deployed in design, publishing, and marketing environments, where sensitive intellectual property and client data may be processed.

Detailed information about CVE-2021-42731: Buffer Overflow (CWE-120) in Adobe InDesign affecting Adobe InDesign. Get real-time updates, technical details, and m

CVE-2021-42731: Buffer Overflow (CWE-120) in Adobe InDesign - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2021-42731: Buffer Overflow (CWE-120) in Adobe InDesign

Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-40709 is a buffer overflow vulnerability (CWE-120) found in Adobe Photoshop versions 21.2.11 and earlier, as well as 22.5 and earlier. The vulnerability arises when Photoshop parses specially crafted SVG (Scalable Vector Graphics) files. An attacker can exploit this flaw by convincing a user to open a malicious SVG file, which triggers a buffer overflow condition. This overflow can lead to arbitrary code execution within the context of the current user, potentially allowing the attacker to execute malicious code on the victim's system. The vulnerability does not require the attacker to be authenticated, but it does require user interaction, specifically the opening of a malicious file. There are no known exploits in the wild reported for this vulnerability as of the published date, and no official patches or updates are linked in the provided information. The vulnerability affects a widely used creative software product, Adobe Photoshop, which is prevalent in professional and creative industries globally. The technical root cause is a failure to properly handle input data when parsing SVG files, leading to memory corruption and overflow conditions. This type of vulnerability is critical in scenarios where untrusted files are received and opened, especially in environments where Photoshop is used to process files from external sources or clients.

Detailed information about CVE-2021-40709: Buffer Overflow (CWE-120) in Adobe Photoshop affecting Adobe Photoshop. Get real-time updates, technical details, and

CVE-2021-40709: Buffer Overflow (CWE-120) in Adobe Photoshop - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2021-40709: Buffer Overflow (CWE-120) in Adobe Photoshop

Adobe Bridge version 11.1 (and earlier) is affected by a Buffer Overflow vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-36075 is a buffer overflow vulnerability (CWE-120) found in Adobe Bridge version 11.1 and earlier. Adobe Bridge is a digital asset management application widely used by creative professionals to organize and manage multimedia files. The vulnerability arises from improper handling of specially crafted Bridge files, which can trigger a buffer overflow condition. This flaw allows an attacker to potentially execute arbitrary code within the security context of the current user. Exploitation requires user interaction, specifically opening or interacting with a maliciously crafted Bridge file. The vulnerability does not require elevated privileges or authentication but depends on the victim's action to trigger the exploit. There are no known public exploits in the wild as of the published date, and no official patches have been linked in the provided information. The buffer overflow can compromise the confidentiality, integrity, and availability of the affected system by allowing arbitrary code execution, potentially leading to data theft, system manipulation, or denial of service. Given that Adobe Bridge is primarily used in creative and media production environments, the attack surface is somewhat specialized but still significant in sectors relying on Adobe's creative suite. The lack of a patch and the requirement for user interaction reduce the immediacy of risk but do not eliminate it, especially in targeted attack scenarios.

Detailed information about CVE-2021-36075: Buffer Overflow (CWE-120) in Adobe Bridge affecting Adobe Bridge. Get real-time updates, technical details, and mitig

CVE-2021-36075: Buffer Overflow (CWE-120) in Adobe Bridge - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2021-36075: Buffer Overflow (CWE-120) in Adobe Bridge

Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-28549 is a buffer overflow vulnerability (CWE-120) affecting Adobe Photoshop versions 21.2.6 and earlier, as well as 22.3 and earlier. The vulnerability arises when Photoshop parses a specially crafted JSX (JavaScript Extension) file. A buffer overflow occurs when the application attempts to process this malicious file, leading to memory corruption. This flaw can be exploited by an unauthenticated attacker to execute arbitrary code within the security context of the current user. However, exploitation requires user interaction, specifically the victim must open the malicious JSX file in Photoshop. The vulnerability does not require prior authentication, increasing the attack surface, but the need for user action limits the attack vector to social engineering or delivery of malicious files through phishing or compromised websites. No known public exploits have been reported in the wild as of the publication date. The vulnerability affects a widely used creative software product, which is prevalent in various industries including media, advertising, and design. The lack of a publicly available patch link in the provided data suggests that mitigation may rely on vendor updates or workarounds not detailed here. Given the nature of buffer overflow vulnerabilities, successful exploitation could lead to arbitrary code execution, potentially allowing attackers to install malware, steal data, or disrupt system operations within the permissions of the user running Photoshop.

Detailed information about CVE-2021-28549: Buffer Overflow (CWE-120) in Adobe Photoshop affecting Adobe Photoshop. Get real-time updates, technical details, and

CVE-2021-28549: Buffer Overflow (CWE-120) in Adobe Photoshop - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2021-28549: Buffer Overflow (CWE-120) in Adobe Photoshop

CVE-2021-28548 is a buffer overflow vulnerability (CWE-120) affecting Adobe Photoshop versions 21.2.6 and earlier, as well as 22.3 and earlier. The vulnerability arises when Photoshop parses a specially crafted JSX (JavaScript Extension) file. A buffer overflow occurs when the application attempts to process this malicious file, leading to memory corruption. This flaw can be exploited by an unauthenticated attacker to execute arbitrary code within the security context of the current user. However, exploitation requires user interaction, specifically the victim must open the malicious JSX file in Photoshop. The vulnerability does not require prior authentication, increasing the attack surface, but the need for user action limits remote exploitation. There are no known public exploits in the wild as of the published date, and no official patches are linked in the provided data. The vulnerability affects a widely used creative software product, which is often installed on workstations in various industries including media, design, and marketing. The buffer overflow could allow attackers to execute code that compromises confidentiality, integrity, and availability of the affected system, potentially leading to data theft, system manipulation, or further network penetration. Given the nature of the vulnerability, it primarily threatens endpoint security on systems where Photoshop is installed and used to open untrusted JSX files.

Detailed information about CVE-2021-28548: Buffer Overflow (CWE-120) in Adobe Photoshop affecting Adobe Photoshop. Get real-time updates, technical details, and

CVE-2021-28548: Buffer Overflow (CWE-120) in Adobe Photoshop - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2021-28548: Buffer Overflow (CWE-120) in Adobe Photoshop

Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted javascript file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-21051 is a buffer overflow vulnerability (CWE-120) affecting Adobe Photoshop versions 21.2.4 and earlier, as well as 22.1.1 and earlier. The vulnerability arises when Photoshop parses a specially crafted JavaScript file embedded or loaded within the application. Due to improper bounds checking during this parsing process, an attacker can craft a malicious JavaScript file that triggers a buffer overflow, allowing arbitrary code execution within the context of the current user. Exploitation requires no authentication but does require user interaction, specifically that the victim opens the malicious file in Photoshop. This means the attacker must convince or trick the user into opening a crafted file, for example via phishing or malicious downloads. Successful exploitation could lead to execution of arbitrary code, potentially allowing the attacker to install malware, steal data accessible to the user, or manipulate files. However, the attack scope is limited to the privileges of the user running Photoshop, and no privilege escalation is directly indicated. There are no known exploits in the wild reported at the time of this analysis, and no official patches or updates are linked in the provided data, though Adobe typically addresses such vulnerabilities in security updates. The vulnerability is categorized as medium severity due to the requirement for user interaction and the limited scope of impact to the current user context.

Detailed information about CVE-2021-21051: Buffer Overflow (CWE-120) in Adobe Photoshop affecting Adobe Photoshop. Get real-time updates, technical details, and

Title	Severity	Type	Source	Date

Threats Tagged 'buffer-overflow-cwe-120'

Filter Threats

Threats Tagged 'buffer-overflow-cwe-120'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility