CVE-2019-7128 | ByteOS Network

Vulnerability Details :

CVE-2019-7128

Assigner-adobe

Assigner Org ID-078d4453-3bcd-4900-85e6-15281da43538

Published At-23 May, 2019 | 17:04

Updated At-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:adobe

Assigner Org ID:078d4453-3bcd-4900-85e6-15281da43538

Published At:23 May, 2019 | 17:04

Updated At:04 Aug, 2024 | 20:38

▼CVE Numbering Authority (CNA)

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected Products

Vendor

Product

Adobe Acrobat and Reader

Versions

Affected

2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier versions

Problem Types

Type	CWE ID	Description
text	N/A	Type Confusion

Type: text

CWE ID: N/A

Description: Type Confusion  

References

Hyperlink	Resource
https://helpx.adobe.com/security/products/acrobat/apsb19-17.html	x_refsource_CONFIRM

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb19-17.html

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://helpx.adobe.com/security/products/acrobat/apsb19-17.html	x_refsource_CONFIRM x_transferred

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb19-17.html

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:psirt@adobe.com

Published At:23 May, 2019 | 18:29

Updated At:24 Aug, 2020 | 17:37

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

>>acrobat_dc>>Versions from 15.006.30060(inclusive) to 15.006.30482(inclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*

>>acrobat_dc>>Versions from 15.008.20082(inclusive) to 19.010.20098(inclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*

>>acrobat_dc>>Versions from 17.011.30056(inclusive) to 17.011.30127(inclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*

>>acrobat_reader_dc>>Versions from 15.006.30060(inclusive) to 15.006.30482(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

>>acrobat_reader_dc>>Versions from 15.008.20082(inclusive) to 19.010.20098(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*

>>acrobat_reader_dc>>Versions from 17.011.30059(inclusive) to 17.011.30127(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

Microsoft Corporation

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-843	Primary	nvd@nist.gov

CWE ID: CWE-843

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://helpx.adobe.com/security/products/acrobat/apsb19-17.html	psirt@adobe.com	Patch Vendor Advisory

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb19-17.html

Source: psirt@adobe.com

Resource:

Patch

Vendor Advisory

Similar CVEs

2064Records found

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-10||CRITICAL

EPSS-5.58% / 89.93%

||

7 Day CHG~0.00%

Published-11 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, CVE-2016-1062, and CVE-2016-1117.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc reader windows acrobat mac_os_x n/a

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.8||CRITICAL

EPSS-18.02% / 94.91%

||

7 Day CHG+3.12%

Published-11 Nov, 2020 | 06:48

Updated-10 Sep, 2024 | 15:51

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-10||HIGH

EPSS-41.90% / 97.33%

||

7 Day CHG~0.00%

Published-08 Sep, 2009 | 22:00

Updated-07 Aug, 2024 | 05:27

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka "TCP/IP Timestamps Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2003 windows_server_2008 windows_vista windows_2000 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-10||HIGH

EPSS-76.22% / 98.88%

||

7 Day CHG~0.00%

Published-13 Feb, 2007 | 22:00

Updated-07 Aug, 2024 | 12:12

The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server response of a specific length that causes a terminating null byte to be written outside of a buffer, which causes heap corruption.

Vendor-n/a Microsoft Corporation

Product-internet_explorer windows_2003_server windows_xp ie windows_2000 n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-2.40% / 84.43%

||

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL.

Vendor-n/a Adobe Inc.

Product-connect n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-13.21% / 93.87%

||

7 Day CHG~0.00%

Published-11 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1045, CVE-2016-1046, CVE-2016-1047, CVE-2016-1048, CVE-2016-1049, CVE-2016-1050, CVE-2016-1051, CVE-2016-1052, CVE-2016-1053, CVE-2016-1054, CVE-2016-1055, CVE-2016-1056, CVE-2016-1057, CVE-2016-1058, CVE-2016-1059, CVE-2016-1060, CVE-2016-1061, CVE-2016-1065, CVE-2016-1066, CVE-2016-1068, CVE-2016-1069, CVE-2016-1070, CVE-2016-1075, CVE-2016-1094, CVE-2016-1121, CVE-2016-1122, CVE-2016-4102, and CVE-2016-4107.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc reader windows acrobat mac_os_x n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-39.92% / 97.22%

||

7 Day CHG~0.00%

Published-23 Mar, 2009 | 14:00

Updated-07 Aug, 2024 | 04:57

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.

Vendor-n/a Microsoft Corporation

Product-internet_explorer windows_7 n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-30.58% / 96.55%

||

7 Day CHG+0.36%

Published-08 Jan, 2007 | 20:00

Updated-07 Aug, 2024 | 20:42

Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors.

Vendor-n/a Microsoft Corporation

Product-windows_2003_server n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-15.20% / 94.34%

||

7 Day CHG~0.00%

Published-10 Mar, 2009 | 20:00

Updated-17 Sep, 2024 | 03:28

Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 on Windows allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation IBM Corporation

Product-windows tivoli_storage_manager_hsm n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-4.82% / 89.09%

||

7 Day CHG-0.56%

Published-02 Apr, 2009 | 17:00

Updated-07 Aug, 2024 | 05:04

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member.

Vendor-n/a Apple Inc.

Product-mac_os_x_server mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.1||HIGH

EPSS-11.17% / 93.21%

||

7 Day CHG~0.00%

Published-09 Dec, 2020 | 23:36

Updated-28 Aug, 2025 | 23:15

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

Product-sharepoint_server sharepoint_foundation Microsoft SharePoint Foundation 2010 Service Pack 2 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server 2019

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-6.19% / 90.47%

||

7 Day CHG~0.00%

Published-11 Nov, 2020 | 06:48

Updated-15 Nov, 2024 | 16:09

AV1 Video Extension Remote Code Execution Vulnerability

AV1 Video Extension Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

Product-av1_video_extension AV1 Video Extension

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-11.41% / 93.30%

||

7 Day CHG~0.00%

Published-25 Mar, 2009 | 01:00

Updated-07 Aug, 2024 | 04:57

Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table.

Vendor-n/a Adobe Inc.

Product-acrobat_reader acrobat n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-53.86% / 97.91%

||

7 Day CHG~0.00%

Published-20 Jun, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.171 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-23.59% / 95.77%

||

7 Day CHG~0.00%

Published-09 Apr, 2009 | 00:00

Updated-07 Aug, 2024 | 04:48

The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.

Vendor-n/a Apple Inc.MIT (Massachusetts Institute of Technology)Red Hat, Inc.Canonical Ltd.Fedora Project

Product-enterprise_linux_server ubuntu_linux enterprise_linux_workstation fedora enterprise_linux mac_os_x enterprise_linux_eus kerberos_5 enterprise_linux_desktop n/a

CWE ID-CWE-824

Access of Uninitialized Pointer

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-5.58% / 89.93%

||

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-17.54% / 94.82%

||

7 Day CHG~0.00%

Published-14 Mar, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-10||HIGH

EPSS-60.40% / 98.21%

||

7 Day CHG~0.00%

Published-10 Jun, 2009 | 17:37

Updated-07 Aug, 2024 | 05:04

The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a "DN AttributeValue," aka "Active Directory Invalid Free Vulnerability." NOTE: this issue is probably a memory leak.

Vendor-n/a Microsoft Corporation

Product-windows_2000 n/a

CWE ID-CWE-399

Not Available

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-42.57% / 97.37%

||

7 Day CHG~0.00%

Published-01 Apr, 2009 | 17:00

Updated-07 Aug, 2024 | 05:04

Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.

Vendor-n/a Microsoft Corporation

Product-windows_vista subsystem_for_unix-based_applications windows_server_2008 windows_services_for_unix n/a

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-10||HIGH

EPSS-49.60% / 97.73%

||

7 Day CHG~0.00%

Published-15 Apr, 2009 | 03:49

Updated-07 Aug, 2024 | 04:24

Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote HTTP servers to execute arbitrary code via crafted parameter values in a response, related to error handling, aka "Windows HTTP Services Integer Underflow Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_vista windows_2000 windows_xp windows_server_2003 windows_server_2008 n/a

CWE ID-CWE-189

Not Available

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.99% / 75.95%

||

7 Day CHG~0.00%

Published-02 Apr, 2020 | 21:30

Updated-04 Aug, 2024 | 11:06

STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006.

Vendor-starface n/a Microsoft Corporation

Product-windows unified_communication_\&_collaboration_client n/a

CWE ID-CWE-427

Uncontrolled Search Path Element

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-26.53% / 96.14%

||

7 Day CHG~0.00%

Published-31 Aug, 2006 | 20:00

Updated-03 Apr, 2025 | 01:03

Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Override settings from user profile and Client Connection Manager wizard" options, allows local users to execute arbitrary code by forcing an Explorer error. NOTE: a third-party researcher has stated that the options are "a convenience to users" and were not intended to restrict execution of arbitrary code

Vendor-n/a Microsoft Corporation

Product-terminal_server n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.58% / 67.92%

||

7 Day CHG~0.00%

Published-13 Feb, 2009 | 00:00

Updated-07 Aug, 2024 | 04:24

Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL, related to "input validation issues."

Vendor-n/a Apple Inc.Microsoft Corporation

Product-windows_vista safari windows_xp mac_os_x mac_os_x_server n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-9.33% / 92.44%

||

7 Day CHG~0.00%

Published-13 Feb, 2009 | 00:00

Updated-07 Aug, 2024 | 04:17

Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string.

Vendor-n/a Apple Inc.

Product-mac_os_x_server mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.78% / 72.82%

||

7 Day CHG~0.00%

Published-03 Jun, 2009 | 20:35

Updated-07 Aug, 2024 | 11:42

The db2fmp process in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 on Windows runs with "OS privilege," which has unknown impact and attack vectors, a different vulnerability than CVE-2008-3856.

Vendor-n/a Microsoft Corporation IBM Corporation

Product-windows db2 n/a

CWE ID-CWE-16

Not Available

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-4.58% / 88.80%

||

7 Day CHG~0.00%

Published-18 Nov, 2015 | 21:00

Updated-12 Apr, 2025 | 10:46

The Adobe Premiere Clip app before 1.2.1 for iOS mishandles unspecified input, which has unknown impact and attack vectors.

Vendor-n/a Adobe Inc.

Product-premiere_clip n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-58.48% / 98.12%

||

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-81.25% / 99.13%

||

7 Day CHG~0.00%

Published-08 Dec, 2004 | 05:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.

Vendor-n/a Microsoft Corporation

Product-w3who.dll n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-62.30% / 98.30%

||

7 Day CHG~0.00%

Published-16 Oct, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.

Vendor-n/a Microsoft Corporation

Product-grpconv n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-22.68% / 95.65%

||

7 Day CHG~0.00%

Published-08 Jun, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.

Vendor-n/a Microsoft Corporation

Product-windows_2000 n/a

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-10||HIGH

EPSS-69.64% / 98.60%

||

7 Day CHG~0.00%

Published-14 Jan, 2009 | 22:00

Updated-07 Aug, 2024 | 10:31

Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_vista windows_2000 windows_xp windows_server_2003 windows_server_2008 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.49% / 64.39%

||

7 Day CHG~0.00%

Published-12 Sep, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.

Vendor-anydesk n/a Microsoft Corporation

Product-anydesk windows n/a

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.78% / 81.93%

||

7 Day CHG~0.00%

Published-28 Oct, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated users to execute arbitrary code when loginwindow is active via Fast User Switching.

Vendor-n/a Apple Inc.

Product-apple_remote_desktop n/a

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.8||CRITICAL

EPSS-63.69% / 98.34%

||

7 Day CHG~0.00%

Published-14 Jan, 2009 | 22:00

Updated-15 Oct, 2024 | 15:35

SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to "insufficiently validating the buffer size," aka "SMB Validation Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_vista windows_2000 windows_xp windows_server_2003 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.83% / 73.58%

||

7 Day CHG~0.00%

Published-02 Apr, 2017 | 01:36

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "libxslt" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Canonical Ltd.

Matching Score-8

Assigner-Canonical Ltd.

CVSS Score-10||HIGH

EPSS-0.29% / 51.48%

||

7 Day CHG~0.00%

Published-21 Nov, 2008 | 02:00

Updated-07 Aug, 2024 | 10:40

The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the (1) add and (2) cancel RSS subscription functions.

Vendor-n/a Apple Inc.

Product-cups n/a

CWE ID-CWE-255

Not Available

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.55% / 66.87%

||

7 Day CHG~0.00%

Published-13 Nov, 2017 | 03:00

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "802.1X" component. It allows attackers to have an unspecified impact by leveraging TLS 1.0 support.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-15.63% / 94.43%

||

7 Day CHG~0.00%

Published-11 Dec, 2008 | 15:00

Updated-07 Aug, 2024 | 10:56

The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via a handle_t argument to an RPC endpoint in which the argument refers to an incompatible procedure.

Vendor-n/a Microsoft Corporation Broadcom Inc.

Product-arcserve_backup windows n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-2.41% / 84.48%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 13:00

Updated-20 Apr, 2025 | 01:37

A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before 2017.1.0p4.

Vendor-unity3d n/a Microsoft Corporation

Product-unity_editor windows n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.84% / 82.21%

||

7 Day CHG~0.00%

Published-13 Nov, 2017 | 03:00

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party "PCRE" product. Versions before 8.40 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.84% / 82.21%

||

7 Day CHG~0.00%

Published-13 Nov, 2017 | 03:00

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party "file" product. Versions before 5.31 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-6.84% / 90.97%

||

7 Day CHG~0.00%

Published-27 Sep, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable.

Vendor-perl n/a Microsoft Corporation

Product-windows perl n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

||

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.41% / 60.37%

||

7 Day CHG~0.00%

Published-11 Jan, 2019 | 18:00

Updated-05 Aug, 2024 | 19:13

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic error existed in the validation of credentials. This was addressed with improved credential validation.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.8||CRITICAL

EPSS-65.61% / 98.43%

||

7 Day CHG~0.00%

Published-13 Oct, 2017 | 13:00

Updated-20 Apr, 2025 | 01:37

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows Search Remote Code Execution Vulnerability".

Vendor-Microsoft Corporation

Product-windows_server_2008 windows_7 windows_server_2012 windows_server_2016 windows_8.1 windows_rt_8.1 windows_10 Windows Search

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.51% / 80.46%

||

7 Day CHG~0.00%

Published-25 Jul, 2003 | 04:00

Updated-03 Apr, 2025 | 01:03

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502.

Vendor-n/a Apple Inc.

Product-darwin_streaming_server n/a

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.8||CRITICAL

EPSS-15.90% / 94.48%

||

7 Day CHG~0.00%

Published-12 Dec, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted files are handled, aka "Microsoft Windows Security Feature Bypass Vulnerability".

Vendor-Microsoft Corporation

Product-windows_10 windows_server_2016 Device Guard

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-4.52% / 88.72%

||

7 Day CHG~0.00%

Published-17 Oct, 2008 | 18:00

Updated-07 Aug, 2024 | 10:17

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference download API, which allows remote attackers to create a browse dialog box, and possibly have unspecified other impact, via an SWF file.

Vendor-n/a Adobe Inc.

Product-flash_player n/a

CWE ID-CWE-264

Not Available

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.00% / 76.01%

||

7 Day CHG~0.00%

Published-17 Dec, 2008 | 01:00

Updated-07 Aug, 2024 | 10:08

Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors.

Vendor-n/a Apple Inc.

Product-mac_os_x_server n/a

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.8||CRITICAL

EPSS-17.16% / 94.75%

||

7 Day CHG~0.00%

Published-02 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".

Vendor-Microsoft Corporation

Product-chakracore ChakraCore

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer