ByteOS

Product

Adobe Acrobat and Reader

Versions

Affected

2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier versions

Problem Types

Type	CWE ID	Description
text	N/A	Type Confusion

Type: text

CWE ID: N/A

Description: Type Confusion

References

Hyperlink	Resource
http://www.securitytracker.com/id/1041809	vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/bid/105443	vdb-entry x_refsource_BID
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html	x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1041809

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/105443

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb18-30.html

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id/1041809	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/bid/105443	vdb-entry x_refsource_BID x_transferred
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.securitytracker.com/id/1041809

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securityfocus.com/bid/105443

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb18-30.html

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:12 Oct, 2018 | 18:29

Updated At:21 Aug, 2019 | 16:20

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*

>>acrobat_dc>>Versions from 15.006.30060(inclusive) to 15.006.30452(inclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*

>>acrobat_dc>>Versions from 15.008.20082(inclusive) to 18.011.20063(inclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*

>>acrobat_dc>>Versions from 17.011.30059(inclusive) to 17.011.30102(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

>>acrobat_reader_dc>>Versions from 15.006.30060(inclusive) to 15.006.30452(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*

>>acrobat_reader_dc>>Versions from 15.008.20082(inclusive) to 18.011.20063(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

>>acrobat_reader_dc>>Versions from 17.011.30059(inclusive) to 17.011.30102(inclusive)

Apple Inc.

>>mac_os_x>>-

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-704	Primary	nvd@nist.gov

CWE ID: CWE-704

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/105443	psirt@adobe.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041809	psirt@adobe.com	Third Party Advisory VDB Entry
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html	psirt@adobe.com	Patch Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/105443

Source: psirt@adobe.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1041809

Source: psirt@adobe.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb18-30.html

Source: psirt@adobe.com

Resource:

Patch

Vendor Advisory

Similar CVEs

5328Records found

CVE-2007-0024

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-31.83% / 96.66%

7 Day CHG~0.00%

Published-09 Jan, 2007 | 23:00

Updated-07 Aug, 2024 | 12:03

Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted web page that contains unspecified integer properties that cause insufficient memory allocation and trigger a buffer overflow, aka the "VML Buffer Overrun Vulnerability."

Product-internet_explorer windows_2003_server windows_xp ie windows_2000 n/a

CVE-2007-0038

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-90.08% / 99.56%

7 Day CHG~0.00%

Published-30 Mar, 2007 | 20:00

Updated-07 Aug, 2024 | 12:03

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred.

Product-windows_2003_server windows_xp windows_vista windows_2000 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6045

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-34.44% / 96.85%

7 Day CHG~0.00%

Published-13 Nov, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript that improperly interacts with use of the Cascading Style Sheets (CSS) empty-cells property for a TABLE element, aka "Internet Explorer Memory Corruption Vulnerability."

Product-internet_explorer n/a

CVE-2015-6055

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-44.44% / 97.47%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Filter arguments, aka "Scripting Engine Memory Corruption Vulnerability."

Product-internet_explorer vbscript jscript n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6092

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-28.22% / 96.32%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Product-word word_viewer office_compatibility_pack office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5757

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.08% / 76.97%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

libpthread in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via an app that uses a crafted syscall to interfere with locking.

Vendor-n/a Apple Inc.

Product-iphone_os mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6106

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-44.79% / 97.49%

7 Day CHG~0.00%

Published-09 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."

Product-live_meeting windows_server_2008 word_viewer lync skype_for_business windows_vista office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5754

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-21.39% / 95.48%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages incorrect privilege dropping associated with a locking error.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2007-0712

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-24.99% / 95.95%

7 Day CHG~0.00%

Published-05 Mar, 2007 | 22:00

Updated-07 Aug, 2024 | 12:26

Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MIDI file.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-quicktime windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6083

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-18.14% / 94.94%

7 Day CHG~0.00%

Published-09 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6151.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-0711

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-23.91% / 95.80%

7 Day CHG~0.00%

Published-05 Mar, 2007 | 22:00

Updated-07 Aug, 2024 | 12:26

Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating systems, allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP video file.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-quicktime windows n/a

CWE ID-CWE-189

Not Available

CVE-2015-6038

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-40.82% / 97.28%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3, 2010 SP2, and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Product-office_compatibility_pack excel sharepoint_server excel_viewer excel_for_mac n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6142

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-22.82% / 95.68%

7 Day CHG~0.00%

Published-09 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, CVE-2015-6159, and CVE-2015-6160.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-0216

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-71.27% / 98.65%

7 Day CHG~0.00%

Published-12 Feb, 2008 | 22:00

Updated-07 Aug, 2024 | 12:12

wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section length headers, aka "Microsoft Works File Converter Input Validation Vulnerability."

Product-office works n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-6064

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-32.62% / 96.71%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6084 and CVE-2015-6085.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6104

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-56.87% / 98.04%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Windows Graphics Memory Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-6103.

Product-windows_rt windows_7 windows_8 windows_server_2008 windows_rt_8.1 windows_vista windows_server_2012 windows_8.1 windows_10 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-6153

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-23.33% / 95.74%

7 Day CHG~0.00%

Published-09 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6158, CVE-2015-6159, and CVE-2015-6160.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6131

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-60.35% / 98.21%

7 Day CHG~0.00%

Published-09 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted .mcl file, aka "Media Center Library Parsing RCE Vulnerability."

Product-windows_8.1 windows_vista windows_7 windows_8 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2007-0208

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-57.63% / 98.08%

7 Day CHG~0.00%

Published-13 Feb, 2007 | 21:00

Updated-07 Aug, 2024 | 12:12

Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.

Product-word office word_viewer works n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2007-0064

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-69.97% / 98.61%

7 Day CHG~0.00%

Published-12 Dec, 2007 | 00:00

Updated-07 Aug, 2024 | 12:03

Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.

Product-windows_media_services windows_vista windows_2003_server windows_xp windows_media_format_runtime windows_2000 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6103

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-56.87% / 98.04%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Product-windows_rt windows_7 windows_8 windows_server_2008 windows_rt_8.1 windows_vista windows_server_2012 windows_8.1 windows_10 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2007-0218

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-51.39% / 97.80%

7 Day CHG~0.00%

Published-12 Jun, 2007 | 19:00

Updated-07 Aug, 2024 | 12:12

Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function.

Product-internet_explorer windows_vista windows_2003_server windows_xp windows_2000 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2018-19713

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.93% / 85.89%

7 Day CHG~0.00%

Published-18 Jan, 2019 | 17:00

Updated-05 Aug, 2024 | 11:44

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc n/a

CWE ID-CWE-416

Use After Free

CVE-2007-0736

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-18.67% / 95.02%

7 Day CHG~0.00%

Published-24 Apr, 2007 | 17:00

Updated-07 Aug, 2024 | 12:26

Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbitrary code via crafted requests to portmap.

Vendor-n/a Apple Inc.

Product-mac_os_x_server mac_os_x n/a

CVE-2018-19418

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-4.88% / 89.17%

7 Day CHG~0.00%

Published-07 Jan, 2021 | 16:49

Updated-05 Aug, 2024 | 11:37

Foxit PDF ActiveX before 5.5.1 allows remote code execution via command injection because of the lack of a security permission control.

Vendor-n/a Microsoft Corporation Foxit Software Incorporated

Product-pdf_activex windows n/a

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2015-6108

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-47.36% / 97.61%

7 Day CHG~0.00%

Published-09 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT Gold and 8.1; Office 2007 SP3; Office 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6; Skype for Business 2016; Lync 2010; Lync 2013 SP1; Live Meeting 2007 Console; and Silverlight 5 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."

Product-windows_rt windows_7 windows_8 lync silverlight windows_vista windows_8.1 windows_10 live_meeting windows_server_2008 word_viewer .net_framework windows_rt_8.1 skype_for_business office windows_server_2012 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-0034

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-62.59% / 98.31%

7 Day CHG~0.00%

Published-09 Jan, 2007 | 23:00

Updated-07 Aug, 2024 | 12:03

Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."

Product-outlook office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6065

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-16.31% / 94.59%

7 Day CHG-7.02%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6078.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6162

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-28.14% / 96.31%

7 Day CHG~0.00%

Published-09 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6152.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6080

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-28.14% / 96.31%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6068, CVE-2015-6072, CVE-2015-6073, CVE-2015-6075, CVE-2015-6077, CVE-2015-6079, and CVE-2015-6082.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-19720

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.09% / 91.79%

7 Day CHG~0.00%

Published-18 Jan, 2019 | 17:00

Updated-05 Aug, 2024 | 11:44

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2007-0025

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-35.14% / 96.90%

7 Day CHG~0.00%

Published-13 Feb, 2007 | 20:00

Updated-07 Aug, 2024 | 12:03

The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.

Product-visual_studio_.net windows_2003_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2015-6140

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-26.65% / 96.15%

7 Day CHG~0.00%

Published-09 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, CVE-2015-6159, and CVE-2015-6160.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-19444

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.34% / 55.62%

7 Day CHG~0.00%

Published-17 Jun, 2019 | 19:46

Updated-05 Aug, 2024 | 11:37

A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free location and requires different JavaScript code for exploitation.

Vendor-n/a Microsoft Corporation Foxit Software Incorporated

CWE ID-CWE-416

Use After Free

CVE-2018-19451

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.67% / 70.49%

7 Day CHG~0.00%

Published-07 Jun, 2019 | 16:51

Updated-05 Aug, 2024 | 11:37

A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when using the Open File action on a Field. An attacker can leverage this to gain remote code execution.

Vendor-n/a Microsoft Corporation Foxit Software Incorporated

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2007-0515

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-61.74% / 98.27%

7 Day CHG~0.00%

Published-26 Jan, 2007 | 00:00

Updated-07 Aug, 2024 | 12:19

Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a different issue than CVE-2006-6456, CVE-2006-5994, and CVE-2006-6561.

Product-word office word_viewer works n/a

CVE-2018-19446

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.35% / 56.97%

7 Day CHG~0.00%

Published-17 Jun, 2019 | 19:39

Updated-05 Aug, 2024 | 11:37

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution.

Vendor-n/a Microsoft Corporation Foxit Software Incorporated

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource

CVE-2016-4188

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.71% / 87.49%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-40725

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-20.85% / 95.40%

7 Day CHG~0.00%

Published-07 Oct, 2021 | 15:07

Updated-16 Sep, 2024 | 20:36

Adobe Acrobat Reader DC AcroForm listbox Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability when processing AcroForm listbox that could result in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Acrobat Reader

CWE ID-CWE-416

Use After Free

CVE-2015-6166

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-20.54% / 95.35%

7 Day CHG~0.00%

Published-09 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read or write access) via unspecified open and close requests, aka "Microsoft Silverlight RCE Vulnerability."

Product-silverlight n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-39817

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.79% / 72.85%

7 Day CHG~0.00%

Published-01 Sep, 2021 | 14:36

Updated-23 Apr, 2025 | 19:29

Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Vendor-Adobe Inc.Microsoft Corporation

Product-windows bridge Bridge

CWE ID-CWE-788

Access of Memory Location After End of Buffer

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-40760

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-1.63% / 81.12%

7 Day CHG~0.00%

Published-18 Nov, 2021 | 16:27

Updated-23 Apr, 2025 | 19:21

Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution

Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.

Vendor-Adobe Inc.Microsoft Corporation

Product-windows after_effects After Effects

CWE ID-CWE-788

Access of Memory Location After End of Buffer

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-0027

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-58.05% / 98.10%

7 Day CHG~0.00%

Published-09 Jan, 2007 | 22:00

Updated-07 Aug, 2024 | 12:03

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.

Product-excel office excel_viewer works n/a

CVE-2015-6042

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-25.71% / 96.03%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the CWindow object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-416

Use After Free

CVE-2015-6074

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-28.14% / 96.31%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6066, CVE-2015-6070, CVE-2015-6071, CVE-2015-6076, and CVE-2015-6087.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-0030

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-58.63% / 98.13%

7 Day CHG~0.00%

Published-09 Jan, 2007 | 23:00

Updated-07 Aug, 2024 | 12:03

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory.

Product-excel office excel_viewer works n/a

CVE-2018-19449

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.31% / 53.84%

7 Day CHG~0.00%

Published-17 Jun, 2019 | 19:30

Updated-05 Aug, 2024 | 11:37

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution.

Vendor-n/a Microsoft Corporation Foxit Software Incorporated

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-6066

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-28.14% / 96.31%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6070, CVE-2015-6071, CVE-2015-6074, CVE-2015-6076, and CVE-2015-6087.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6085

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-22.82% / 95.68%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6064 and CVE-2015-6084.

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-0069

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-65.46% / 98.42%

7 Day CHG~0.00%

Published-08 Jan, 2008 | 20:00

Updated-07 Aug, 2024 | 12:03

Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that trigger memory corruption, aka "Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability."