CVE-2019-8161 | ByteOS Network

Vulnerability Details :

CVE-2019-8161

Assigner-adobe

Assigner Org ID-078d4453-3bcd-4900-85e6-15281da43538

Published At-17 Oct, 2019 | 20:11

Updated At-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:adobe

Assigner Org ID:078d4453-3bcd-4900-85e6-15281da43538

Published At:17 Oct, 2019 | 20:11

Updated At:04 Aug, 2024 | 21:10

▼CVE Numbering Authority (CNA)

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected Products

Vendor

Product

Adobe Acrobat and Reader

Versions

Affected

2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier versions

Problem Types

Type	CWE ID	Description
text	N/A	Type Confusion

Type: text

CWE ID: N/A

Description: Type Confusion

References

Hyperlink	Resource
https://helpx.adobe.com/security/products/acrobat/apsb19-49.html	x_refsource_CONFIRM

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://helpx.adobe.com/security/products/acrobat/apsb19-49.html	x_refsource_CONFIRM x_transferred

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:psirt@adobe.com

Published At:17 Oct, 2019 | 21:15

Updated At:08 Sep, 2021 | 17:22

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

>>acrobat_dc>>Versions from 15.006.30060(inclusive) to 15.006.30504(exclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*

>>acrobat_dc>>Versions from 15.008.20082(inclusive) to 19.021.20047(exclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*

>>acrobat_dc>>Versions from 17.011.30059(inclusive) to 17.011.30150(exclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*

>>acrobat_reader_dc>>Versions from 15.006.30060(inclusive) to 15.006.30504(exclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

>>acrobat_reader_dc>>Versions from 15.008.20082(inclusive) to 19.021.20047(exclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*

>>acrobat_reader_dc>>Versions from 17.011.30059(inclusive) to 17.011.30150(exclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

>>macos>>-

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

Microsoft Corporation

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-843	Primary	nvd@nist.gov

CWE ID: CWE-843

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://helpx.adobe.com/security/products/acrobat/apsb19-49.html	psirt@adobe.com	Patch Vendor Advisory

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html

Source: psirt@adobe.com

Resource:

Patch

Vendor Advisory

Similar CVEs

2239Records found

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-3.18% / 87.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:15

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-3.18% / 87.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:23

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-3.18% / 87.22%

||

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:13

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-9.8||CRITICAL

EPSS-3.91% / 88.53%

||

7 Day CHG~0.00%

Published-27 Jan, 2020 | 23:12

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier, 2017.011.30110 and earlier version, and 2015.006.30461 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.84% / 75.13%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:43

Updated-03 Aug, 2024 | 16:25

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-7.5||HIGH

EPSS-2.35% / 85.21%

||

7 Day CHG~0.00%

Published-26 Apr, 2014 | 10:00

Updated-06 May, 2026 | 22:30

core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion" for SELECT elements.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation

Product-chrome windows linux_kernel mac_os_x n/a

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.24% / 79.66%

||

7 Day CHG~0.00%

Published-12 Nov, 2024 | 17:53

Updated-08 Jul, 2025 | 15:41

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Vendor-Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation

Product-linux_kernel visual_studio_2022 .net windows macos Microsoft Visual Studio 2022 version 17.8 PowerShell 7.5 Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.10 .NET 9.0 Microsoft Visual Studio 2022 version 17.11

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.58% / 81.93%

||

7 Day CHG+0.04%

Published-24 Sep, 2025 | 16:17

Updated-26 Feb, 2026 | 17:48

Known KEV||Action Due Date - 2025-10-14||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Apple Inc.Google LLC

Product-macos linux_kernel windows chrome Chrome Chromium V8

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-3.37% / 87.62%

||

7 Day CHG~0.00%

Published-16 Apr, 2025 | 18:24

Updated-03 Apr, 2026 | 14:31

Known KEV||Action Due Date - 2025-05-08||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.

Vendor-Apple Inc.

Product-tvos visionos macos iphone_os ipados macOS iOS and iPadOS tvOS visionOS Multiple Products

CWE ID-CWE-1220

Insufficient Granularity of Access Control

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-10||CRITICAL

EPSS-0.67% / 71.74%

||

7 Day CHG~0.00%

Published-26 May, 2020 | 17:03

Updated-04 Aug, 2024 | 11:56

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR < 68.8 and Firefox < 76.

Vendor-Mozilla Corporation Microsoft Corporation

Product-firefox windows firefox_esr Firefox Firefox ESR

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.5||HIGH

EPSS-6.93% / 91.59%

||

7 Day CHG~0.00%

Published-11 Jun, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0534.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.5||HIGH

EPSS-1.30% / 80.10%

||

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x windows flash_player linux_kernel n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.17% / 79.07%

||

7 Day CHG~0.00%

Published-22 May, 2020 | 20:47

Updated-04 Aug, 2024 | 12:18

An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.

Vendor-n/a Linux Kernel Organization, Inc Aviatrix Systems, Inc.Apple Inc.Microsoft Corporation

Product-linux_kernel controller vpn_client windows macos gateway n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.5||HIGH

EPSS-1.32% / 80.28%

||

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.70%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. Password autofill may fill in passwords after failing authentication.

Vendor-Apple Inc.

Product-iphone_os visionos ipados macos macOS watchOS iOS and iPadOS visionOS

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.21% / 44.10%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:22

Updated-02 Apr, 2026 | 19:19

This issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

Vendor-Apple Inc.

Product-iphone_os visionos ipados macos visionOS macOS iOS and iPadOS iPadOS watchOS

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.20% / 42.19%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:22

Updated-02 Apr, 2026 | 19:19

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An input validation issue was addressed.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.46% / 64.48%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 18:19

An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-862

Missing Authorization

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.9||CRITICAL

EPSS-5.73% / 90.62%

||

7 Day CHG~0.00%

Published-08 May, 2025 | 22:17

Updated-26 Feb, 2026 | 18:28

Azure Storage Resource Provider Spoofing Vulnerability

Server-side request forgery (ssrf) in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network.

Vendor-Microsoft Corporation

Product-azure_storage_resource_provider Azure Storage Resource Provider (SRP)

CWE ID-CWE-918

Server-Side Request Forgery (SSRF)

Matching Score-8

Assigner-Protect AI (formerly huntr.dev)

Matching Score-8

Assigner-Protect AI (formerly huntr.dev)

CVSS Score-10||CRITICAL

EPSS-12.77% / 94.15%

||

7 Day CHG~0.00%

Published-15 Nov, 2024 | 10:53

Updated-19 Nov, 2024 | 14:47

Remote Command Execution in gogs/gogs

A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter during file uploads. An attacker can set `tree_path=.git.` to upload a file into the .git directory, allowing them to write or rewrite the `.git/config` file. If the `core.sshCommand` is set, this can lead to remote command execution.

Vendor-gogs gogs gogs Microsoft Corporation

Product-windows gogs gogs/gogs gogs

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.5||HIGH

EPSS-2.03% / 84.14%

||

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x windows flash_player linux_kernel n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.71%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:22

Updated-02 Apr, 2026 | 19:19

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Deleting a conversation in Messages may expose user contact information in system logging.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.20% / 42.13%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:22

Updated-02 Apr, 2026 | 19:19

A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5, macOS Sonoma 14.8.2, macOS Tahoe 26.1, macOS Ventura 13.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

Vendor-Apple Inc.

Product-ipados macos macOS iPadOS

CWE ID-CWE-276

Incorrect Default Permissions

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.30% / 53.83%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Apps that appear to use App Sandbox may be able to launch without restrictions.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-8.49% / 92.53%

||

7 Day CHG~0.00%

Published-15 May, 2020 | 17:31

Updated-04 Aug, 2024 | 12:04

SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can trigger a line number to CSI functions that exceeds INT_MAX.

Vendor-vandyke n/a Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-iphone_os linux_kernel windows macos securecrt n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.5||HIGH

EPSS-2.03% / 84.14%

||

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x windows flash_player linux_kernel n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.5||HIGH

EPSS-2.23% / 84.87%

||

7 Day CHG~0.00%

Published-09 Jul, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0539.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel n/a

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.59% / 69.70%

||

7 Day CHG~0.00%

Published-22 Dec, 2022 | 00:00

Updated-16 Apr, 2025 | 16:15

The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for iOS < 101.

Vendor-Apple Inc.Mozilla Corporation

Product-iphone_os firefox Firefox for iOS

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-10||CRITICAL

EPSS-0.57% / 69.16%

||

7 Day CHG~0.00%

Published-26 May, 2020 | 17:04

Updated-04 Aug, 2024 | 11:56

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR < 68.8 and Firefox < 76.

Vendor-Mozilla Corporation Microsoft Corporation

Product-firefox windows firefox_esr Firefox Firefox ESR

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 35.65%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 34.58%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker may be able to cause unexpected app termination.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-400

Uncontrolled Resource Consumption

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.85%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user consent.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-276

Incorrect Default Permissions

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 36.76%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 18:18

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.20% / 41.48%

||

7 Day CHG~0.00%

Published-27 Jan, 2025 | 21:46

Updated-03 Jun, 2026 | 14:22

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. Deleting a conversation in Messages may expose user contact information in system logging.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.71%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.05% / 15.91%

||

7 Day CHG~0.00%

Published-27 Jan, 2025 | 21:46

Updated-03 Jun, 2026 | 14:25

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system.

Vendor-Apple Inc.

Product-macos macOS

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.21% / 42.64%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 18:17

This issue was addressed by adding a delay between verification code attempts. This issue is fixed in macOS Sequoia 15.4. A malicious app may be able to access a user's saved passwords.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-862

Missing Authorization

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 58.82%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:24

Updated-02 Apr, 2026 | 19:19

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to gain elevated privileges.

Vendor-Apple Inc.

Product-iphone_os tvos ipados macos macOS watchOS iOS and iPadOS tvOS

CWE ID-CWE-276

Incorrect Default Permissions

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 33.87%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to check the existence of an arbitrary path on the file system.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-862

Missing Authorization

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.34% / 56.91%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:24

Updated-02 Apr, 2026 | 19:19

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. A download's origin may be incorrectly associated.

Vendor-Apple Inc.

Product-iphone_os safari ipados Safari iOS and iPadOS watchOS macOS

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.72% / 72.86%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:22

Updated-02 Apr, 2026 | 19:19

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination.

Vendor-Apple Inc.

Product-iphone_os visionos ipados macos visionOS macOS iOS and iPadOS iPadOS watchOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.62% / 70.45%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 18:23

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15.4. An app may be able to observe unprotected user data.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.1||CRITICAL

EPSS-4.60% / 89.46%

||

7 Day CHG~0.00%

Published-08 Apr, 2025 | 20:02

Updated-22 Apr, 2025 | 22:15

ColdFusion | Deserialization of Untrusted Data (CWE-502)

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user resulting in a High impact to Confidentiality and Integrity. Exploitation of this issue does not require user interaction.

Vendor-Adobe Inc.

Product-coldfusion ColdFusion

CWE ID-CWE-502

Deserialization of Untrusted Data

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.5||HIGH

EPSS-2.23% / 84.87%

||

7 Day CHG~0.00%

Published-09 Jul, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0537.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.17% / 37.76%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app acting as a HTTPS proxy could get access to sensitive user data.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-3.82% / 88.36%

||

7 Day CHG~0.00%

Published-25 Mar, 2020 | 21:53

Updated-04 Aug, 2024 | 11:21

Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the filename of a renamed file may end with a dot. This file may then be renamed to have a .php filename.

Vendor-s9y n/a Microsoft Corporation

Product-windows serendipity n/a

CWE ID-CWE-434

Unrestricted Upload of File with Dangerous Type

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.5||HIGH

EPSS-2.03% / 84.14%

||

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x windows flash_player linux_kernel n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 33.87%

||

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to read or write to protected files.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-863

Incorrect Authorization

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-27.02% / 96.48%

||

7 Day CHG~0.00%

Published-27 Jan, 2025 | 21:45

Updated-02 Jun, 2026 | 16:04

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory.

Vendor-Apple Inc.

Product-ipados macos iPadOS macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 31.01%

||

7 Day CHG~0.00%

Published-27 Jan, 2025 | 21:45

Updated-21 May, 2026 | 14:27

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access removable volumes without user consent.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-276

Incorrect Default Permissions