ByteOS

Product:Acrobat and Reader

Added At:08 Jun, 2022

Due At:22 Jun, 2022

Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.

Used in Ransomware

Unknown

CWE

CWE-119

Required Action:

Apply updates per vendor instructions.

Additional Notes:

https://nvd.nist.gov/vuln/detail/CVE-2009-3953

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:adobe

Assigner Org ID:078d4453-3bcd-4900-85e6-15281da43538

Published At:13 Jan, 2010 | 19:00

Updated At:22 Oct, 2025 | 00:05

▼CVE Numbering Authority (CNA)

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl	x_refsource_MISC
http://secunia.com/advisories/38138	third-party-advisory x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242	vdb-entry signature x_refsource_OVAL
http://www.adobe.com/support/security/bulletins/apsb10-02.html	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2010-0060.html	vendor-advisory x_refsource_REDHAT
http://www.vupen.com/english/advisories/2010/0103	vdb-entry x_refsource_VUPEN
http://www.securitytracker.com/id?1023446	vdb-entry x_refsource_SECTRACK
http://osvdb.org/61690	vdb-entry x_refsource_OSVDB
https://bugzilla.redhat.com/show_bug.cgi?id=554293	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/55551	vdb-entry x_refsource_XF
http://secunia.com/advisories/38215	third-party-advisory x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html	vendor-advisory x_refsource_SUSE
http://www.us-cert.gov/cas/techalerts/TA10-013A.html	third-party-advisory x_refsource_CERT
http://www.securityfocus.com/bid/37758	vdb-entry x_refsource_BID

Hyperlink: http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl

Resource:

x_refsource_MISC

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-02.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0060.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.vupen.com/english/advisories/2010/0103

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securitytracker.com/id?1023446

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://osvdb.org/61690

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=554293

Resource:

x_refsource_CONFIRM

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/55551

Resource:

vdb-entry

x_refsource_XF

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-013A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: http://www.securityfocus.com/bid/37758

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl	x_refsource_MISC x_transferred
http://secunia.com/advisories/38138	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242	vdb-entry signature x_refsource_OVAL x_transferred
http://www.adobe.com/support/security/bulletins/apsb10-02.html	x_refsource_CONFIRM x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0060.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.vupen.com/english/advisories/2010/0103	vdb-entry x_refsource_VUPEN x_transferred
http://www.securitytracker.com/id?1023446	vdb-entry x_refsource_SECTRACK x_transferred
http://osvdb.org/61690	vdb-entry x_refsource_OSVDB x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=554293	x_refsource_CONFIRM x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/55551	vdb-entry x_refsource_XF x_transferred
http://secunia.com/advisories/38215	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.us-cert.gov/cas/techalerts/TA10-013A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.securityfocus.com/bid/37758	vdb-entry x_refsource_BID x_transferred

Hyperlink: http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl

Resource:

x_refsource_MISC

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-02.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0060.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/0103

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securitytracker.com/id?1023446

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://osvdb.org/61690

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=554293

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/55551

Resource:

vdb-entry

x_refsource_XF

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-013A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://www.securityfocus.com/bid/37758

Resource:

vdb-entry

x_refsource_BID

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-787	CWE-787 Out-of-bounds Write

Type: CWE

CWE ID: CWE-787

Description: CWE-787 Out-of-bounds Write

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2022-06-08

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3953

Timeline

Event	Date
CVE-2009-3953 added to CISA KEV	2022-06-08 00:00:00

Event: CVE-2009-3953 added to CISA KEV

Date: 2022-06-08 00:00:00

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3953	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3953

Resource:

government-resource

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:13 Jan, 2010 | 19:30

Updated At:21 Apr, 2026 | 21:12

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2022-06-08	2022-06-22	Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability	Apply updates per vendor instructions.

Date Added: 2022-06-08

Due Date: 2022-06-22

Vulnerability Name: Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

Required Action: Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*

>>acrobat>>Versions from 7.0(inclusive) to 7.1.4(exclusive)

cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*

>>acrobat>>Versions from 8.0(inclusive) to 8.2(exclusive)

cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*

>>acrobat>>Versions from 9.0(inclusive) to 9.3(exclusive)

Apple Inc.

>>mac_os_x>>-

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

SUSE

>>linux_enterprise_debuginfo>>11

cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:*

openSUSE

>>opensuse>>11.1

cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*

openSUSE

>>opensuse>>11.2

cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*

SUSE

>>linux_enterprise>>10.0

cpe:2.3:o:suse:linux_enterprise:10.0:sp2:*:*:*:*:*:*

SUSE

>>linux_enterprise>>10.0

cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov
CWE-787	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-787

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Evaluator Impact

Per: http://www.adobe.com/support/security/bulletins/apsb10-02.html Affected software versions: Adobe Reader 9.2 and earlier versions for Windows, Macintosh, and UNIX Adobe Acrobat 9.2 and earlier versions for Windows and Macintosh

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html	psirt@adobe.com	Mailing List Third Party Advisory
http://osvdb.org/61690	psirt@adobe.com	Broken Link
http://secunia.com/advisories/38138	psirt@adobe.com	Broken Link
http://secunia.com/advisories/38215	psirt@adobe.com	Broken Link
http://www.adobe.com/support/security/bulletins/apsb10-02.html	psirt@adobe.com	Not Applicable Patch Vendor Advisory
http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl	psirt@adobe.com	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0060.html	psirt@adobe.com	Broken Link
http://www.securityfocus.com/bid/37758	psirt@adobe.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1023446	psirt@adobe.com	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-013A.html	psirt@adobe.com	Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2010/0103	psirt@adobe.com	Broken Link Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=554293	psirt@adobe.com	Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/55551	psirt@adobe.com	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242	psirt@adobe.com	Broken Link
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://osvdb.org/61690	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/38138	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/38215	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.adobe.com/support/security/bulletins/apsb10-02.html	af854a3a-2127-422b-91ae-364da2661108	Not Applicable Patch Vendor Advisory
http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0060.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.securityfocus.com/bid/37758	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1023446	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-013A.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2010/0103	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=554293	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/55551	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242	af854a3a-2127-422b-91ae-364da2661108	Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3953	134c704f-9b21-4f2e-91b3-4a467353bcc0	US Government Resource

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html

Source: psirt@adobe.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://osvdb.org/61690

Source: psirt@adobe.com

Resource:

Broken Link

Source: psirt@adobe.com

Resource:

Broken Link

Source: psirt@adobe.com

Resource:

Broken Link

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-02.html

Source: psirt@adobe.com

Resource:

Not Applicable

Patch

Vendor Advisory

Hyperlink: http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl

Source: psirt@adobe.com

Resource:

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0060.html

Source: psirt@adobe.com

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/bid/37758

Source: psirt@adobe.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1023446

Source: psirt@adobe.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-013A.html

Source: psirt@adobe.com

Resource:

Third Party Advisory

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2010/0103

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=554293

Source: psirt@adobe.com

Resource:

Issue Tracking

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/55551

Source: psirt@adobe.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242

Source: psirt@adobe.com

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://osvdb.org/61690

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-02.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Not Applicable

Patch

Vendor Advisory

Hyperlink: http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0060.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/bid/37758

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1023446

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-013A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2010/0103

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=554293

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/55551

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3953

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource:

US Government Resource

Similar CVEs

7104Records found

CVE-2019-8594

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.80% / 76.17%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8689

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-12.85% / 95.88%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Product-enterprise_linux_server itunes iphone_os watchos tvos safari enterprise_linux_workstation mac_os_x enterprise_linux_desktop icloud iCloud for Windows (Microsoft Store)iTunes for Windows watchOS Safari macOS iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8191

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.29% / 87.18%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:19

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8544

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-2.21% / 80.72%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Product-enterprise_linux_server itunes iphone_os watchos tvos safari enterprise_linux_workstation enterprise_linux_desktop icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2026-6305

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.34% / 26.10%

7 Day CHG~0.00%

Published-15 Apr, 2026 | 19:04

Updated-27 May, 2026 | 18:16

Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Google LLC Apple Inc.

Product-linux_kernel windows macos chrome Chrome

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8844

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-2.18% / 80.49%

7 Day CHG+0.09%

Published-27 Oct, 2020 | 19:55

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.

Product-enterprise_linux_server itunes iphone_os ipados tvos watchos safari enterprise_linux_workstation enterprise_linux_desktop icloud iTunes for Windows watchOS Safari iCloud for Windows tvOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8820

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-9.54% / 94.94%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos safari icloud iTunes for Windows watchOS iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8763

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.89% / 77.43%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13, Safari 13.0.1, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipados tvos safari icloud iTunes for Windows iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8819

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.92% / 77.77%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipados tvos safari icloud iTunes for Windows iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8623

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-8.29% / 94.33%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos tvos safari mac_os_x icloud iTunes for Windows watchOS Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8752

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.42% / 70.00%

7 Day CHG+0.06%

Published-27 Oct, 2020 | 19:45

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, iCloud for Windows 7.14, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipad_os watchos tvos safari icloud iTunes for Windows watchOS Safari iCloud for Windows tvOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8536

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.95% / 78.16%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Product-enterprise_linux_server itunes iphone_os watchos tvos safari enterprise_linux_workstation enterprise_linux_desktop icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8601

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-4.05% / 89.58%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-itunes iphone_os watchos tvos safari mac_os_x icloud iTunes for Windows watchOS Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-8553

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.83% / 76.66%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2. Clicking a malicious SMS link may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos tvOS watchOS iOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8669

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-2.44% / 82.62%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8671

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-7.71% / 93.98%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8826

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.09% / 61.95%

7 Day CHG+0.04%

Published-27 Oct, 2020 | 19:53

Updated-04 Aug, 2024 | 21:31

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8773

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.42% / 70.00%

7 Day CHG+0.06%

Published-27 Oct, 2020 | 19:48

Updated-04 Aug, 2024 | 21:31

Vendor-Apple Inc.

Product-itunes iphone_os ipad_os watchos tvos safari icloud iTunes for Windows watchOS Safari iCloud for Windows tvOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8558

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-7.47% / 93.82%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos tvos safari icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8816

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-2.58% / 83.62%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7992

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-5.07% / 91.44%

7 Day CHG~0.00%

Published-26 Aug, 2019 | 18:47

Updated-04 Aug, 2024 | 21:02

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8014

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-8.75% / 94.60%

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:43

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7019

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-4.56% / 90.61%

7 Day CHG~0.00%

Published-24 May, 2019 | 17:53

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8183

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-13.07% / 95.94%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:18

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8186

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-3.85% / 89.03%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:19

Updated-04 Aug, 2024 | 21:10

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7060

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-4.56% / 90.61%

7 Day CHG~0.00%

Published-24 May, 2019 | 18:29

Updated-04 Aug, 2024 | 20:38

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7094

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-6.43% / 92.99%

7 Day CHG~0.00%

Published-24 May, 2019 | 18:47

Updated-04 Aug, 2024 | 20:38

Adobe Photoshop CC 19.1.7 and earlier, and 20.0.2 and earlier have a heap corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7098

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-5.18% / 91.59%

7 Day CHG~0.00%

Published-23 May, 2019 | 16:47

Updated-04 Aug, 2024 | 20:38

Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Microsoft Corporation Adobe Inc.

Product-windows shockwave_player Adobe Shockwave Player

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7052

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-3.99% / 89.44%

7 Day CHG~0.00%

Published-24 May, 2019 | 18:24

Updated-04 Aug, 2024 | 20:38

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7119

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-5.98% / 92.53%

7 Day CHG~0.00%

Published-23 May, 2019 | 17:09

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7120

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-5.98% / 92.53%

7 Day CHG~0.00%

Published-23 May, 2019 | 17:07

Updated-04 Aug, 2024 | 20:38

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7027

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-4.56% / 90.61%

7 Day CHG~0.00%

Published-24 May, 2019 | 18:00

Updated-04 Aug, 2024 | 20:38

Product-acrobat_dc windows acrobat_reader_dc mac_os_x Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7037

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-3.99% / 89.44%

7 Day CHG~0.00%

Published-24 May, 2019 | 18:11

Updated-04 Aug, 2024 | 20:38

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7832

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-6.20% / 92.76%

7 Day CHG~0.00%

Published-22 May, 2019 | 17:58

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions , 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2017.011.30142 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows acrobat_reader_dc mac_os_x Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7113

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-6.45% / 93.01%

7 Day CHG~0.00%

Published-23 May, 2019 | 16:52

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7997

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-6.43% / 92.99%

7 Day CHG~0.00%

Published-26 Aug, 2019 | 18:53

Updated-04 Aug, 2024 | 21:02

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7101

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-4.08% / 89.65%

7 Day CHG~0.00%

Published-23 May, 2019 | 16:28

Updated-04 Aug, 2024 | 20:38

Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Microsoft Corporation Adobe Inc.

Product-windows shockwave_player Adobe Shockwave Player

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6237

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.80% / 76.17%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 20:16

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-5827

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.98% / 78.40%

7 Day CHG~0.00%

Published-27 Jun, 2019 | 16:13

Updated-04 Aug, 2024 | 20:09

Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Canonical Ltd.Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-ubuntu_linux debian_linux chrome fedora backports leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-5684

Matching Score-10

Assigner-NVIDIA Corporation

Matching Score-10

Assigner-NVIDIA Corporation

CVSS Score-10||CRITICAL

EPSS-5.42% / 91.86%

7 Day CHG~0.00%

Published-06 Aug, 2019 | 19:48

Updated-04 Aug, 2024 | 20:01

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access of an input texture array, which may lead to denial of service or code execution.

Vendor-NVIDIA Corporation Microsoft Corporation

Product-windows gpu_driver GPU Display Driver

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-5685

Matching Score-10

Assigner-NVIDIA Corporation

Matching Score-10

Assigner-NVIDIA Corporation

CVSS Score-9.8||CRITICAL

EPSS-5.04% / 91.40%

7 Day CHG~0.00%

Published-06 Aug, 2019 | 19:48

Updated-04 Aug, 2024 | 20:01

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause an out of bounds access to a shader local temporary array, which may lead to denial of service or code execution.

Vendor-NVIDIA Corporation Microsoft Corporation

Product-windows gpu_driver GPU Display Driver

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-5821

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.42% / 70.02%

7 Day CHG~0.00%

Published-27 Jun, 2019 | 16:13

Updated-04 Aug, 2024 | 20:09

Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-5806

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.29% / 67.17%

7 Day CHG~0.00%

Published-27 Jun, 2019 | 16:13

Updated-04 Aug, 2024 | 20:09

Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Debian GNU/Linux Fedora Project Microsoft Corporation

Product-debian_linux chrome fedora windows backports leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-6201

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.95% / 78.15%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 20:16

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-5808

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.79% / 76.04%

7 Day CHG~0.00%

Published-27 Jun, 2019 | 16:13

Updated-04 Aug, 2024 | 20:09

Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports leap Chrome

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-5787

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.95% / 78.15%

7 Day CHG~0.00%

Published-23 May, 2019 | 19:10

Updated-04 Aug, 2024 | 20:01

Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-openSUSE Google LLC

Product-chrome backports leap Chrome

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-5824

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.37% / 69.14%

7 Day CHG~0.00%

Published-27 Jun, 2019 | 16:13

Updated-04 Aug, 2024 | 20:09

Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-5836

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.45% / 70.68%

7 Day CHG-0.03%

Published-27 Jun, 2019 | 16:13

Updated-04 Aug, 2024 | 20:09

Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-5807

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.40% / 69.72%

7 Day CHG~0.00%

Published-27 Jun, 2019 | 16:13

Updated-04 Aug, 2024 | 20:09

Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-5831

Matching Score-10

Assigner-Chrome