ByteOS

Product

Acrobat Reader

Versions

Affected

From unspecified through 22.001.20085 (custom)
From unspecified through 20.005.3031x (custom)
From unspecified through 17.012.30205 (custom)
From unspecified through None (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-824	Access of Uninitialized Pointer (CWE-824)

Type: CWE

CWE ID: CWE-824

Description: Access of Uninitialized Pointer (CWE-824)

Metrics

Version	Base score	Base severity	Vector
3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://helpx.adobe.com/security/products/acrobat/apsb22-16.html	x_refsource_MISC

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb22-16.html

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://helpx.adobe.com/security/products/acrobat/apsb22-16.html	x_refsource_MISC x_transferred

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb22-16.html

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:11 May, 2022 | 18:15

Updated At:07 Nov, 2023 | 03:45

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*

>>acrobat_dc>>Versions from 15.008.20082(inclusive) to 22.001.20085(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*

>>acrobat_reader_dc>>Versions from 15.008.20082(inclusive) to 22.001.20085(inclusive)

Apple Inc.

>>macos>>-

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*

>>acrobat>>Versions from 17.011.30059(inclusive) to 17.012.30205(inclusive)

cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*

>>acrobat_reader>>Versions from 17.011.30059(inclusive) to 17.012.30205(inclusive)

Apple Inc.

>>macos>>-

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*

>>acrobat>>Versions from 20.001.30005(inclusive) to 20.005.30314(inclusive)

cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*

>>acrobat_reader>>Versions from 20.001.30005(inclusive) to 20.005.30314(inclusive)

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*

>>acrobat>>Versions from 20.001.30005(inclusive) to 20.005.30311(inclusive)

cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*

>>acrobat_reader>>Versions from 20.001.30005(inclusive) to 20.005.30311(inclusive)

Apple Inc.

>>macos>>-

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-824	Primary	psirt@adobe.com

CWE ID: CWE-824

Type: Primary

Source: psirt@adobe.com

References

Hyperlink	Source	Resource
https://helpx.adobe.com/security/products/acrobat/apsb22-16.html	psirt@adobe.com	Vendor Advisory

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb22-16.html

Source: psirt@adobe.com

Resource:

Vendor Advisory

Similar CVEs

7432Records found

CVE-2011-0105

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-89.42% / 99.53%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0223

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.02% / 83.04%

7 Day CHG-0.60%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0170

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-8.70% / 92.13%

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile in a JPEG image.

Product-windows windows_7 windows_xp windows_vista itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0036

Matching Score-8

Matching Score-8

CVSS Score-8.1||HIGH

EPSS-17.41% / 94.81%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated users to execute arbitrary code via crafted data, aka "Remote Desktop Protocol (RDP) Elevation of Privilege Vulnerability."

Product-windows_server_2012 windows_8.1 windows_7 windows_10 n/a

CVE-2011-0318

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.53% / 80.60%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0609

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-92.40% / 99.72%

7 Day CHG~0.00%

Published-15 Mar, 2011 | 17:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

CVE-2016-0960

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.78% / 92.17%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4307

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-8.39% / 91.96%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0101

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-48.27% / 97.65%

7 Day CHG~0.00%

Published-09 Mar, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via crafted media content, aka "Windows Media Parsing Remote Code Execution Vulnerability."

Product-windows_7 windows_server_2008 windows_rt_8.1 windows_server_2012 windows_8.1 windows_10 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2018-19720

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.09% / 91.81%

7 Day CHG~0.00%

Published-18 Jan, 2019 | 17:00

Updated-05 Aug, 2024 | 11:44

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2010-4091

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-28.24% / 96.33%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4387

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.65% / 85.18%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4397

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.62% / 85.11%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CVE-2016-0979

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.59%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-4306

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.95% / 89.24%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4192.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4588

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-73.59% / 98.76%

7 Day CHG~0.00%

Published-23 Dec, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference.

Product-wmi_administrative_tools n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2016-0973

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.73% / 90.10%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via a URLLoader.load call, a different vulnerability than CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.

CWE ID-CWE-416

Use After Free

CVE-2016-0040

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-77.87% / 98.96%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 11:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-04-18||Apply updates per vendor instructions.

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."

Product-windows_server_2008 windows_vista windows_7 n/a Windows

CVE-2010-4009

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.33% / 86.78%

7 Day CHG~0.00%

Published-09 Dec, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CVE-2020-9871

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.33%

7 Day CHG~0.00%

Published-22 Oct, 2020 | 17:54

Updated-04 Aug, 2024 | 10:43

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos mac_os_x icloud iTunes for Windows watchOS iCloud for Windows macOS iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-34225

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.99% / 76.00%

7 Day CHG~0.00%

Published-15 Jul, 2022 | 15:34

Updated-23 Apr, 2025 | 18:01

Adobe Acrobat Reader DC AcroForm exportValues Use-After-Free Remote Code Execution Vulnerability

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-416

Use After Free

CVE-2010-4379

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.30% / 78.94%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted SIPR file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4376

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.21% / 89.55%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4384

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.95% / 82.71%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header (aka MDPR) in a RealMedia file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-linux_kernel realplayer mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-0976

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.59%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-9873

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.33%

7 Day CHG~0.00%

Published-22 Oct, 2020 | 17:59

Updated-04 Aug, 2024 | 10:43

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos mac_os_x icloud iTunes for Windows watchOS iCloud for Windows macOS iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-125

Out-of-bounds Read

CVE-2010-4195

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-13.25% / 93.89%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-4087

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-8.37% / 91.95%

7 Day CHG~0.00%

Published-29 Oct, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with a crafted mmap record containing an invalid length of a VSWV entry, a different vulnerability than CVE-2010-4089.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4192

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.33% / 88.48%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted 3D Assets 0xFFFFFF88 type record that triggers an incorrect memory allocation, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4306.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4377

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.83% / 90.19%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code by specifying many subbands in cook audio codec information in a Real Audio file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4085

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.13% / 90.43%

7 Day CHG~0.00%

Published-29 Oct, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4086, and CVE-2010-4088.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4086

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.18% / 90.47%

7 Day CHG~0.00%

Published-29 Oct, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Director (.dir) media file with an invalid element size, a different vulnerability than CVE-2010-2581, CVE-2010-2880, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4088.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4155

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.13% / 88.19%

7 Day CHG+1.03%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-4084

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.13% / 90.43%

7 Day CHG~0.00%

Published-29 Oct, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-9571

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-2.09% / 83.31%

7 Day CHG+0.19%

Published-26 Jun, 2020 | 20:15

Updated-04 Aug, 2024 | 10:34

Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Microsoft Corporation Adobe Inc.

Product-windows illustrator Adobe Illustrator

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-3822

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.20% / 83.76%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets (CSS) counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0986

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-7.38% / 91.34%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3217

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-65.66% / 98.43%

7 Day CHG~0.00%

Published-13 Oct, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka "Word Pointer Vulnerability."

Product-word n/a

CVE-2010-3649

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3811

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-10.43% / 92.93%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element attributes.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-3803

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-12.93% / 93.79%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-3231

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-60.73% / 98.23%

7 Day CHG~0.00%

Published-13 Oct, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka "Excel Record Parsing Memory Corruption Vulnerability."

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2022-35675

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.47% / 63.46%

7 Day CHG+0.17%

Published-11 Aug, 2022 | 14:41

Updated-23 Apr, 2025 | 17:53

Adobe FrameMaker SVG File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Microsoft Corporation

Product-framemaker windows FrameMaker

CWE ID-CWE-416

Use After Free

CVE-2010-3976

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-10.04% / 92.77%

7 Day CHG~0.00%

Published-19 Oct, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.

Vendor-n/a Adobe Inc.Microsoft Corporation

Product-windows flash_player n/a

CVE-2010-3970

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-83.59% / 99.24%

7 Day CHG~0.00%

Published-22 Dec, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor (aka graphics rendering engine) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted .MIC or unspecified Office document containing a thumbnail bitmap with a negative biClrUsed value, as reported by Moti and Xu Hao, aka "Windows Shell Graphics Processing Overrun Vulnerability."

Product-windows_server_2003 windows_xp windows_server_2008 windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3805

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-12.02% / 93.53%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving WebSockets. NOTE: this may overlap CVE-2010-3254.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-3809

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.35% / 84.27%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of inline styling, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-3950

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-61.04% / 98.25%

7 Day CHG~0.00%

Published-16 Dec, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image in an Office document, aka "TIFF Image Converter Memory Corruption Vulnerability."

Product-office_converter_pack works office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3645

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3629

Matching Score-8

Matching Score-8