ByteOS

Product

Adobe Acrobat and Reader

Versions

Affected

2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier versions

Problem Types

Type	CWE ID	Description
text	N/A	Out-of-bounds write

Type: text

CWE ID: N/A

Description: Out-of-bounds write

References

Hyperlink	Resource
http://www.securitytracker.com/id/1041809	vdb-entry x_refsource_SECTRACK
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html	x_refsource_CONFIRM
http://www.securityfocus.com/bid/105432	vdb-entry x_refsource_BID
https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/	x_refsource_MISC

Hyperlink: http://www.securitytracker.com/id/1041809

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb18-30.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/105432

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id/1041809	vdb-entry x_refsource_SECTRACK x_transferred
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/105432	vdb-entry x_refsource_BID x_transferred
https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/	x_refsource_MISC x_transferred

Hyperlink: http://www.securitytracker.com/id/1041809

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb18-30.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/105432

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:12 Oct, 2018 | 18:29

Updated At:24 Feb, 2020 | 21:15

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*

>>acrobat_dc>>Versions from 15.006.30060(inclusive) to 15.006.30452(inclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*

>>acrobat_dc>>Versions from 15.008.20082(inclusive) to 18.011.20063(inclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*

>>acrobat_dc>>Versions from 17.011.30059(inclusive) to 17.011.30102(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

>>acrobat_reader_dc>>Versions from 15.006.30060(inclusive) to 15.006.30452(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*

>>acrobat_reader_dc>>Versions from 15.008.20082(inclusive) to 18.011.20063(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

>>acrobat_reader_dc>>Versions from 17.011.30059(inclusive) to 17.011.30102(inclusive)

Apple Inc.

>>mac_os_x>>-

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/105432	psirt@adobe.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041809	psirt@adobe.com	Third Party Advisory VDB Entry
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html	psirt@adobe.com	Vendor Advisory
https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/	psirt@adobe.com	N/A

Hyperlink: http://www.securityfocus.com/bid/105432

Source: psirt@adobe.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1041809

Source: psirt@adobe.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb18-30.html

Source: psirt@adobe.com

Resource:

Vendor Advisory

Hyperlink: https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/

Source: psirt@adobe.com

Resource: N/A

Similar CVEs

7615Records found

CVE-2010-2883

Matching Score-10

Matching Score-10

CVSS Score-7.3||HIGH

EPSS-93.25% / 99.80%

7 Day CHG~0.00%

Published-09 Sep, 2010 | 21:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

Vendor-n/a Microsoft Corporation Adobe Inc.Apple Inc.

Product-windows acrobat_reader acrobat macos n/a Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-8531

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-18.68% / 95.02%

7 Day CHG~0.00%

Published-10 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 07:02

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.

Vendor-Microsoft Corporation

Product-csharp_software_development_kit azure_internet_of_things_edge Hub Device Client SDK Azure IoT Edge

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4177

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-39.66% / 97.21%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27905

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.53% / 66.37%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:09

Updated-04 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to execute arbitrary code with system privileges.

Vendor-Apple Inc.

Product-iphone_os tvos watchos ipados watchOS tvOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4239

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.04% / 88.03%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1280

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-37.16% / 97.04%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0986

Matching Score-10

Assigner-Flexera Software LLC

Matching Score-10

Assigner-Flexera Software LLC

CVSS Score-8.8||HIGH

EPSS-9.79% / 92.65%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted Shockwave file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0987

Matching Score-10

Assigner-Flexera Software LLC

Matching Score-10

Assigner-Flexera Software LLC

CVSS Score-8.8||HIGH

EPSS-11.73% / 93.43%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1283

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-8.61% / 92.05%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27860

Matching Score-10

Assigner-Zero Day Initiative

Matching Score-10

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-4.57% / 88.77%

7 Day CHG~0.00%

Published-11 Feb, 2021 | 23:35

Updated-04 Aug, 2024 | 16:25

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XFA templates. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11727.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf windows foxit_reader Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-38118

Matching Score-10

Assigner-Zero Day Initiative

Matching Score-10

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-1.54% / 80.64%

7 Day CHG~0.00%

Published-03 May, 2024 | 01:59

Updated-12 Aug, 2025 | 18:26

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21325.

Vendor-Foxit Software Incorporated Microsoft Corporation

Product-pdf_reader pdf_editor windows PDF Reader pdf_editor

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0128

Matching Score-10

Assigner-Flexera Software LLC

Matching Score-10

Assigner-Flexera Software LLC

CVSS Score-9.3||HIGH

EPSS-8.22% / 91.86%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-director shockwave_player windows macos n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0127

Matching Score-10

Assigner-Flexera Software LLC

Matching Score-10

Assigner-Flexera Software LLC

CVSS Score-8.8||HIGH

EPSS-12.35% / 93.62%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27906

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-2.32% / 84.16%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:08

Updated-04 Aug, 2024 | 16:25

Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to cause unexpected application termination or heap corruption.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2018-4249

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.90% / 74.69%

7 Day CHG~0.00%

Published-08 Jun, 2018 | 00:00

Updated-05 Aug, 2024 | 05:11

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves pktmnglr_ipfilter_input in com.apple.packet-mangler in the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow and stack-based buffer overflow) via a crafted app.

Vendor-n/a Apple Inc.

Product-apple_tv iphone_os watchos mac_os_x n/a

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2018-4935

Matching Score-10

Matching Score-10

Product-linux_kernel windows_8.1 chrome_os mac_os_x windows flash_player_desktop_runtime windows_10 flash_player Adobe Flash Player 29.0.0.113 and earlier versions

CVSS Score-8.8||HIGH

EPSS-45.21% / 97.51%

7 Day CHG~0.00%

Published-19 May, 2018 | 17:00

Updated-05 Aug, 2024 | 05:18

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Google LLC Adobe Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27947

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 47.63%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:37

Updated-04 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-4937

Matching Score-10

Matching Score-10

Product-linux_kernel windows_8.1 chrome_os mac_os_x windows flash_player_desktop_runtime windows_10 flash_player Adobe Flash Player 29.0.0.113 and earlier versions

CVSS Score-8.8||HIGH

EPSS-45.21% / 97.51%

7 Day CHG~0.00%

Published-19 May, 2018 | 17:00

Updated-05 Aug, 2024 | 05:18

Vendor-n/a Google LLC Adobe Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

CWE ID-CWE-787

Out-of-bounds Write

CVE-2009-3831

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-7.34% / 91.32%

7 Day CHG~0.00%

Published-30 Oct, 2009 | 20:05

Updated-07 Aug, 2024 | 06:38

Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domain name.

Vendor-n/a Opera Microsoft Corporation

Product-windows opera_browser n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-3333

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-93.96% / 99.88%

7 Day CHG~0.00%

Published-10 Nov, 2010 | 01:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-03-24||Apply updates per vendor instructions.

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."

Vendor-n/a Microsoft Corporation

Product-open_xml_file_format_converter office n/a Office

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27907

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 46.24%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:28

Updated-04 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2009-3129

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-91.03% / 99.62%

7 Day CHG~0.00%

Published-11 Nov, 2009 | 19:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-03-24||Apply updates per vendor instructions.

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset, aka "Excel Featheader Record Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-excel_viewer office open_xml_file_format_converter excel n/a Excel

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-19447

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.32% / 54.61%

7 Day CHG~0.00%

Published-17 Jun, 2019 | 19:37

Updated-05 Aug, 2024 | 11:37

A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string. An attacker can leverage this to gain remote code execution.

Vendor-n/a Microsoft Corporation Foxit Software Incorporated

Product-windows foxit_pdf_sdk_activex n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0972

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.58%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-1057

Matching Score-10

Matching Score-10

CVSS Score-4.2||MEDIUM

EPSS-2.81% / 85.57%

7 Day CHG~0.00%

Published-11 Sep, 2020 | 17:08

Updated-04 Aug, 2024 | 06:25

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.

Vendor-Microsoft Corporation

Product-windows_server_2016 chakracore windows_10 windows_server_2019 edge Microsoft Edge (EdgeHTML-based)ChakraCore

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1028

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.19% / 86.46%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-19449

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.31% / 53.84%

7 Day CHG~0.00%

Published-17 Jun, 2019 | 19:30

Updated-05 Aug, 2024 | 11:37

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution.

Vendor-n/a Microsoft Corporation Foxit Software Incorporated

Product-windows foxit_pdf_sdk_activex n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1026

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-2.37% / 84.34%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-19448

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.36% / 57.49%

7 Day CHG~0.00%

Published-17 Jun, 2019 | 19:33

Updated-05 Aug, 2024 | 11:37

In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveraging this to gain remote code execution.

Vendor-n/a Microsoft Corporation Foxit Software Incorporated

Product-windows foxit_pdf_sdk_activex n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0967

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-43.25% / 97.41%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0980

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.58%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1021

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.30% / 86.71%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1029

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.19% / 86.46%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1023

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-2.37% / 84.34%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0979

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.58%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-10016

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.56% / 67.43%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:03

Updated-04 Aug, 2024 | 10:50

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos watchOS tvOS macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-0807

Matching Score-10

Matching Score-10

Product-windows_server_2016 windows_server_2019 windows_10 Windows Windows Server Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems

CVSS Score-8.8||HIGH

EPSS-17.37% / 94.80%

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-04 Aug, 2024 | 06:18

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0809, CVE-2020-0869.

Vendor-Microsoft Corporation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1022

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.30% / 86.71%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0976

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.58%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0981

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-6.54% / 90.75%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0980.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1027

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-2.37% / 84.34%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0977

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.58%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0968

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.58%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1024

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.19% / 86.46%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27912

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.99% / 75.93%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:10

Updated-04 Aug, 2024 | 16:25

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos macos icloud watchOS tvOS macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1025

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-2.37% / 84.34%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1297

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-93.62% / 99.83%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 18:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

Vendor-n/a Adobe Inc.Microsoft Corporation SUSE Apple Inc.openSUSE

Product-air windows opensuse acrobat linux_enterprise flash_player mac_os_x n/a Flash Player

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1281

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-12.84% / 93.77%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1012

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-5.38% / 89.72%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0970

Matching Score-10

Matching Score-10