ByteOS

Product

tvOS

Versions

Affected

From unspecified before 18.4 (custom)

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 18.4 (custom)

Vendor

Product

iPadOS

Versions

Affected

From unspecified before 17.7 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 15.4 (custom)

Vendor

Product

visionOS

Versions

Affected

From unspecified before 2.4 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 14.7 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 13.7 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	Processing a maliciously crafted file may lead to arbitrary code execution

Type: N/A

CWE ID: N/A

Description: Processing a maliciously crafted file may lead to arbitrary code execution

References

Hyperlink	Resource
https://support.apple.com/en-us/122377	N/A
https://support.apple.com/en-us/122371	N/A
https://support.apple.com/en-us/122372	N/A
https://support.apple.com/en-us/122373	N/A
https://support.apple.com/en-us/122378	N/A
https://support.apple.com/en-us/122374	N/A
https://support.apple.com/en-us/122375	N/A

Hyperlink: https://support.apple.com/en-us/122377

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122371

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122372

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122373

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122378

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122374

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122375

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-94	CWE-94 Improper Control of Generation of Code ('Code Injection')

Type: CWE

CWE ID: CWE-94

Description: CWE-94 Improper Control of Generation of Code ('Code Injection')

Metrics

Version	Base score	Base severity	Vector
3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

2. CVE Program Container

References

Hyperlink	Resource
http://seclists.org/fulldisclosure/2025/Apr/13	N/A
http://seclists.org/fulldisclosure/2025/Apr/10	N/A
http://seclists.org/fulldisclosure/2025/Apr/9	N/A
http://seclists.org/fulldisclosure/2025/Apr/8	N/A
http://seclists.org/fulldisclosure/2025/Apr/5	N/A
http://seclists.org/fulldisclosure/2025/Apr/4	N/A
http://seclists.org/fulldisclosure/2025/Apr/12	N/A
http://seclists.org/fulldisclosure/2025/Apr/11	N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/13

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/10

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/9

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/8

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/5

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/4

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/12

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/11

Resource: N/A

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:31 Mar, 2025 | 23:15

Updated At:03 Nov, 2025 | 22:18

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions before 17.7.6(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions from 18.0(inclusive) to 18.4(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions before 18.4(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 13.0(inclusive) to 13.7.5(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 14.0(inclusive) to 14.7.5(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 15.0(inclusive) to 15.4(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

>>tvos>>Versions before 18.4(exclusive)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

>>visionos>>Versions before 2.4(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-94	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-94

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://support.apple.com/en-us/122371	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122372	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122373	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122374	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122375	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122377	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122378	product-security@apple.com	Vendor Advisory
http://seclists.org/fulldisclosure/2025/Apr/10	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/fulldisclosure/2025/Apr/11	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/fulldisclosure/2025/Apr/12	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/fulldisclosure/2025/Apr/13	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/fulldisclosure/2025/Apr/4	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/fulldisclosure/2025/Apr/5	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/fulldisclosure/2025/Apr/8	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/fulldisclosure/2025/Apr/9	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: https://support.apple.com/en-us/122371

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122372

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122373

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122374

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122375

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122377

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122378

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/10

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/11

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/12

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/13

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/4

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/5

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/8

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Apr/9

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1700Records found

CVE-2024-54529

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.14% / 33.63%

7 Day CHG+0.01%

Published-11 Dec, 2024 | 22:58

Updated-03 Nov, 2025 | 23:17

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2022-32897

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.1||HIGH

EPSS-0.44% / 62.58%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 19:21

Updated-03 Aug, 2024 | 07:54

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-32924

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.28% / 51.34%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 04:16

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos watchos ipados tvos iphone_os macOS watchOS tvOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1535

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-91.68% / 99.67%

7 Day CHG~0.00%

Published-15 Aug, 2012 | 10:00

Updated-22 Oct, 2025 | 01:15

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Vendor-n/a SUSE Red Hat, Inc.Microsoft Corporation openSUSE Adobe Inc.Linux Kernel Organization, Inc Apple Inc.

Product-mac_os_x flash_player enterprise_linux_server windows linux_kernel enterprise_linux_desktop opensuse linux_enterprise_desktop enterprise_linux_workstation n/a Flash Player

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0014

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-52.27% / 97.85%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."

Vendor-n/a Microsoft Corporation Apple Inc.

Product-.net_framework windows windows_7 windows_xp windows_server_2008 windows_server_2003 silverlight windows_vista mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2025-55313

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.01% / 2.68%

7 Day CHG~0.00%

Published-11 Dec, 2025 | 00:00

Updated-18 Dec, 2025 | 21:33

An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. They allow potential arbitrary code execution when processing crafted PDF files. The vulnerability stems from insufficient handling of memory allocation failures after assigning an extremely large value to a form field's charLimit property via JavaScript. This can result in memory corruption and may allow an attacker to execute arbitrary code by persuading a user to open a malicious file.

Vendor-n/a Foxit Software Incorporated Apple Inc.Microsoft Corporation

Product-windows pdf_editor pdf_reader macos n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2025-24159

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.80%

7 Day CHG~0.00%

Published-27 Jan, 2025 | 21:45

Updated-03 Nov, 2025 | 21:19

A validation issue was addressed with improved logic. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-tvos watchos ipados macos visionos iphone_os iOS and iPadOS tvOS visionOS watchOS iPadOS macOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-27857

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.1||HIGH

EPSS-1.58% / 81.30%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:47

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipados tvos visionos macos visionOS iOS and iPadOS macOS tvOS ios ipados macos tvos visionos

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-27856

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.41%

7 Day CHG~0.00%

Published-15 Jan, 2025 | 19:35

Updated-14 Mar, 2025 | 13:42

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, tvOS 17.5, visionOS 1.2. Processing a file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-tvos macos iphone_os safari visionos ipados watchos visionOS Safari tvOS iOS and iPadOS macOS watchOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-27793

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-6.3||MEDIUM

EPSS-0.44% / 62.81%

7 Day CHG~0.00%

Published-08 May, 2024 | 22:15

Updated-04 Nov, 2025 | 18:16

The issue was addressed with improved checks. This issue is fixed in iTunes 12.13.2 for Windows. Parsing a file may lead to an unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iTunes for Windows itunes

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-23208

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-2.95% / 86.17%

7 Day CHG~0.00%

Published-23 Jan, 2024 | 00:25

Updated-04 Nov, 2025 | 19:16

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-tvos watchos ipados macos iphone_os watchOS iOS and iPadOS tvOS macOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2023-32418

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 22.71%

7 Day CHG~0.00%

Published-27 Jul, 2023 | 00:31

Updated-23 Oct, 2024 | 14:35

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2023-32383

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 36.61%

7 Day CHG~0.00%

Published-10 Jan, 2024 | 22:03

Updated-20 Jun, 2025 | 16:15

This issue was addressed by forcing hardened runtime on the affected binaries at the system level. This issue is fixed in macOS Monterey 12.6.6, macOS Big Sur 11.7.7, macOS Ventura 13.4. An app may be able to inject code into sensitive binaries bundled with Xcode.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2023-41984

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 10.37%

7 Day CHG~0.00%

Published-26 Sep, 2023 | 20:14

Updated-04 Nov, 2025 | 20:16

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-tvos watchos ipados macos iphone_os watchOS iOS and iPadOS tvOS macOS macos tvos ios_and_ipados watchos

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2022-32837

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 20.82%

7 Day CHG~0.00%

Published-24 Aug, 2022 | 19:46

Updated-29 May, 2025 | 18:15

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to cause unexpected system termination or write kernel memory.

Vendor-Apple Inc.

Product-iphone_os macos tvos mac_os_x ipados macOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-32826

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.13% / 33.03%

7 Day CHG~0.00%

Published-23 Sep, 2022 | 18:59

Updated-22 May, 2025 | 16:15

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges.

Vendor-Apple Inc.

Product-mac_os_x tvos macos iphone_os ipados watchos watchOS tvOS macOS

CWE ID-CWE-269

Improper Privilege Management

CVE-2024-20783

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.25% / 47.73%

7 Day CHG~0.00%

Published-09 Jul, 2024 | 19:18

Updated-02 Aug, 2024 | 20:17

Adobe Indesign 2024 RLE File Parsing Heap Memory Corruption

InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows indesign macos InDesign Desktop indesign

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-20795

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.15% / 35.34%

7 Day CHG~0.00%

Published-11 Apr, 2024 | 10:53

Updated-04 Dec, 2024 | 15:15

Animate has an arbitrary code execution vulnerability when parsing svg files

Animate versions 23.0.4, 24.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows animate macos Animate animate

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2024-20745

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.06%

7 Day CHG~0.00%

Published-18 Mar, 2024 | 14:59

Updated-04 Dec, 2024 | 22:07

ZDI-CAN-22671: Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Premiere Pro versions 24.1, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows premiere_pro macos Premiere Pro premiere_pro

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-5122

Matching Score-8

Matching Score-8

Product-macos enterprise_linux_server enterprise_linux_desktop evergreen windows windows_8 linux_enterprise_desktop flash_player_desktop_runtime linux_enterprise_workstation_extension linux_kernel flash_player windows_8.1 enterprise_linux_workstation enterprise_linux_server_eus n/a Flash Player

CVSS Score-7.8||HIGH

EPSS-92.78% / 99.75%

7 Day CHG~0.00%

Published-14 Jul, 2015 | 10:00

Updated-17 Nov, 2025 | 22:15

Known KEV||Action Due Date - 2022-05-04||The impacted product is end-of-life and should be disconnected if still in use.

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.

Vendor-n/a SUSE Red Hat, Inc.Microsoft Corporation openSUSE Adobe Inc.Linux Kernel Organization, Inc Apple Inc.

CWE ID-CWE-416

Use After Free

CVE-2024-20731

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-1.07% / 77.36%

7 Day CHG~0.00%

Published-15 Feb, 2024 | 12:18

Updated-13 Feb, 2025 | 17:32

TALOS-2023-1901 - Adobe Acrobat Reader FileAttachment PDAnnot destroy use-after-free vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader acrobat_dc acrobat_reader acrobat_reader_dc acrobat

CWE ID-CWE-416

Use After Free

CVE-2022-32865

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.73%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 20:15

The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos iphone_os macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-20785

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.25% / 47.73%

7 Day CHG~0.00%

Published-09 Jul, 2024 | 19:18

Updated-02 Aug, 2024 | 20:17

Adobe Indesign 2024 TIFF File Parsing Memory Corruption Remote Code Execution vulnerability

Product-windows indesign macos InDesign Desktop indesign

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-20792

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.17% / 37.60%

7 Day CHG~0.00%

Published-16 May, 2024 | 08:08

Updated-05 Dec, 2024 | 17:44

Adobe Illustrator TIF File Parsing Use-After-Free Remote memory corruption

Illustrator versions 28.4, 27.9.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows macos illustrator Illustrator illustrator

CWE ID-CWE-416

Use After Free

CVE-2015-5119

Matching Score-8

Matching Score-8

Product-enterprise_linux_server_aus enterprise_linux_server_from_rhui enterprise_linux_server enterprise_linux_eus enterprise_linux_desktop evergreen windows linux_enterprise_desktop linux_kernel flash_player enterprise_linux_workstation opensuse linux_enterprise_workstation_extension mac_os_x n/a Flash Player

CVSS Score-7.8||HIGH

EPSS-93.21% / 99.79%

7 Day CHG+0.06%

Published-08 Jul, 2015 | 14:00

Updated-17 Nov, 2025 | 20:15

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.

Vendor-n/a SUSE Red Hat, Inc.Microsoft Corporation openSUSE Adobe Inc.Linux Kernel Organization, Inc Apple Inc.

CWE ID-CWE-416

Use After Free

CVE-2015-5123

Matching Score-8

Matching Score-8

Product-macos enterprise_linux_server evergreen enterprise_linux_desktop flash_player windows linux_enterprise_desktop flash_player_desktop_runtime enterprise_linux_workstation enterprise_linux_server_eus linux_kernel linux_enterprise_workstation_extension n/a Flash Player

CVSS Score-7.8||HIGH

EPSS-47.56% / 97.62%

7 Day CHG~0.00%

Published-14 Jul, 2015 | 10:00

Updated-17 Nov, 2025 | 20:15

Known KEV||Action Due Date - 2022-05-04||The impacted product is end-of-life and should be disconnected if still in use.

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.

Vendor-n/a SUSE Red Hat, Inc.Microsoft Corporation openSUSE Adobe Inc.Linux Kernel Organization, Inc Apple Inc.

CWE ID-CWE-416

Use After Free

CVE-2021-1785

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.40%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 18:00

Updated-03 Aug, 2024 | 16:25

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-32939

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.17% / 37.51%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 19:15

The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-ipados iphone_os iOS and iPadOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-9883

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.06% / 77.28%

7 Day CHG~0.00%

Published-22 Oct, 2020 | 17:59

Updated-04 Aug, 2024 | 10:43

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipados tvos watchos mac_os_x macos icloud iTunes for Windows watchOS iCloud for Windows macOS iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-32907

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.14% / 33.50%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 20:15

This issue was addressed with improved checks. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos tvos watchOS iOS

CWE ID-CWE-269

Improper Privilege Management

CVE-2022-32942

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.30% / 52.53%

7 Day CHG~0.00%

Published-15 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 16:15

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-125

Out-of-bounds Read

CVE-2015-3043

Matching Score-8

Matching Score-8

Vendor-n/a Red Hat, Inc.Microsoft Corporation openSUSE Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Novell

CVSS Score-7.8||HIGH

EPSS-82.65% / 99.21%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-17 Nov, 2025 | 20:15

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.

Product-enterprise_linux_server_aus enterprise_linux_server_from_rhui enterprise_linux_server enterprise_linux_eus evergreen enterprise_linux_desktop windows suse_linux_enterprise_workstation_extension suse_linux_enterprise_desktop linux_kernel flash_player enterprise_linux_workstation opensuse mac_os_x n/a Flash Player

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-20781

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.25% / 47.73%

7 Day CHG~0.00%

Published-09 Jul, 2024 | 19:18

Updated-02 Aug, 2024 | 20:13

Adobe Indesign TIF File Parsing Heap Memory Corruption

Product-windows indesign macos InDesign Desktop indesign

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-32860

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.85%

7 Day CHG~0.00%

Published-15 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 19:15

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, macOS Big Sur 11.6.8. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-ipados macos iphone_os macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-9604

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-3.76% / 87.78%

7 Day CHG~0.00%

Published-25 Jun, 2020 | 21:21

Updated-04 Aug, 2024 | 10:34

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3113

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-92.42% / 99.72%

7 Day CHG~0.00%

Published-23 Jun, 2015 | 21:00

Updated-17 Nov, 2025 | 20:15

Known KEV||Action Due Date - 2022-05-04||The impacted product is end-of-life and should be disconnected if still in use.

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.

Vendor-n/a SUSE Red Hat, Inc.Microsoft Corporation openSUSE Adobe Inc.HP Inc.Linux Kernel Organization, Inc Apple Inc.

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-32914

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.29% / 51.65%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 20:15

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos iphone_os watchos tvos macOS watchOS

CWE ID-CWE-416

Use After Free

CVE-2024-20791

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.19% / 41.23%

7 Day CHG~0.00%

Published-16 May, 2024 | 08:08

Updated-04 Dec, 2024 | 22:39

Illustrator 2024 BMP File Parsing Memory Corruption

Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows macos illustrator Illustrator illustrator

CWE ID-CWE-125

Out-of-bounds Read

CVE-2024-20739

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.19% / 41.10%

7 Day CHG-0.01%

Published-15 Feb, 2024 | 12:26

Updated-06 Dec, 2024 | 14:57

ZDI-CAN-22647: Adobe Audition AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows audition macos Audition audition

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-32802

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.03%

7 Day CHG~0.00%

Published-20 Sep, 2022 | 20:19

Updated-28 May, 2025 | 16:15

A logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Monterey 12.5. Processing a maliciously crafted file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-ipados macos tvos iphone_os tvOS macOS

CWE ID-CWE-693

Protection Mechanism Failure

CVE-2024-20765

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.14% / 34.08%

7 Day CHG~0.00%

Published-29 Feb, 2024 | 16:35

Updated-07 Feb, 2025 | 17:25

ZDI-CAN-22674: Adobe Acrobat Reader DC PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc acrobat macos acrobat_reader windows Acrobat Reader acrobat_dc acrobat_reader acrobat_reader_dc acrobat

CWE ID-CWE-416

Use After Free

CVE-2022-32811

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.48%

7 Day CHG~0.00%

Published-24 Aug, 2022 | 19:46

Updated-29 May, 2025 | 19:15

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-667

Improper Locking

CVE-2020-9715

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-56.21% / 98.04%

7 Day CHG~0.00%

Published-19 Aug, 2020 | 00:00

Updated-05 May, 2025 | 17:16

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-macos acrobat_reader_dc windows acrobat_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2024-20752

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-2.06% / 83.59%

7 Day CHG~0.00%

Published-18 Mar, 2024 | 15:54

Updated-04 Dec, 2024 | 22:05

ZDI-CAN-22653: Adobe Bridge PS File Parsing Use-After-Free Remote Code Execution Vulnerability

Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows bridge macos Bridge bridge

CWE ID-CWE-416

Use After Free

CVE-2022-32898

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-5.34% / 89.86%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-05 May, 2025 | 17:18

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-ipados iphone_os macos watchos macOS watchOS

CVE-2024-20756

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-1.92% / 83.06%

7 Day CHG~0.00%

Published-18 Mar, 2024 | 15:54

Updated-04 Dec, 2024 | 22:03

Adobe Bridge 2024 Out of Bound Write Remote Code Execution Vulnerability

Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows bridge macos Bridge bridge

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-32796

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.51%

7 Day CHG~0.00%

Published-23 Sep, 2022 | 18:59

Updated-22 May, 2025 | 20:15

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-32801

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.58%

7 Day CHG~0.00%

Published-23 Sep, 2022 | 18:59

Updated-22 May, 2025 | 15:15

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5. An app may be able to gain root privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-269

Improper Privilege Management

CVE-2022-32903

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.41%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 04:16

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-tvos iphone_os watchos watchOS iOS

CWE ID-CWE-416

Use After Free

CVE-2020-9873

Matching Score-8

Assigner-Apple Inc.