Adobe Systems Incorporated vulnerabilities, page 4
144 vulnerabilities
Known vulnerabilities in Adobe Systems Incorporated products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.
CVE-2017-11254adobe systems incorporatedacrobat reader+5
EPSS score8.13%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the Acrobat/Reader's JavaScript engine. Successful exploitation could lead to arbitrary code execution.CVE-2017-11230adobe systems incorporatedacrobat reader+5EPSS score10.07%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 engine. Successful exploitation could lead to arbitrary code execution.CVE-2017-3118adobe systems incorporatedacrobat reader+4EPSS score8.89%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability related to execution of malicious attachments.CVE-2017-3120adobe systems incorporatedacrobat reader+4EPSS score9.36%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA parsing engine when handling certain types of internal instructions. Successful exploitation could lead to arbitrary code execution.CVE-2017-3016adobe systems incorporatedacrobat reader+4EPSS score8.13%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.CVE-2017-3113adobe systems incorporatedacrobat reader+4EPSS score9.36%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in JavaScript engine when creating large strings. Successful exploitation could lead to arbitrary code execution.CVE-2017-3085adobe systems incorporatedflash player+6EPSS score4.48%
Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect.CVE-2017-3106adobe systems incorporatedflash player+6EPSS score22.31%
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.CVE-2017-3107adobe systems incorporatedexperience manager+1EPSS score6.79%
Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability.CVE-2017-3123adobe systems incorporatedacrobat reader+4EPSS score14.37%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data drawing position definition. Successful exploitation could lead to arbitrary code execution.CVE-2017-3116adobe systems incorporatedacrobat reader+4EPSS score8.13%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the MakeAccessible plugin when parsing TrueType font data. Successful exploitation could lead to arbitrary code execution.CVE-2017-3108adobe systems incorporatedexperience manager+1EPSS score8.62%
Adobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability.CVE-2017-3117adobe systems incorporatedacrobat reader+4EPSS score18.89%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the plugin that handles links within the PDF. Successful exploitation could lead to arbitrary code execution.CVE-2017-3115adobe systems incorporatedacrobat reader+4EPSS score5.81%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an information disclosure vulnerability when handling links in a PDF document.CVE-2017-3121adobe systems incorporatedacrobat reader+4EPSS score8.13%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Enhanced Metafile Format (EMF) parser. Successful exploitation could lead to arbitrary code execution.CVE-2017-3124adobe systems incorporatedacrobat reader+4EPSS score8.30%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the picture exchange (PCX) file format parsing module. Successful exploitation could lead to arbitrary code execution.CVE-2017-3122adobe systems incorporatedacrobat reader+4EPSS score7.45%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to Bezier curves. Successful exploitation could lead to arbitrary code execution.CVE-2017-3119adobe systems incorporatedacrobat reader+4EPSS score6.59%
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in Acrobat/Reader 11.0.19 engine. Successful exploitation could lead to arbitrary code execution.CVE-2017-3091adobe systems incorporateddigital editions+1EPSS score8.08%
Adobe Digital Editions 4.5.4 and earlier versions 4.5.4 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.CVE-2017-3110adobe systems incorporatedexperience manager+1EPSS score5.25%
Adobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability.