Latest CVE Feed
-
5.5
MEDIUMCVE-2024-41832
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitig... Read more
- Published: Aug. 14, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-4141
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers. ... Read more
Affected Products : xpdf- Published: Apr. 24, 2024
- Modified: Jan. 29, 2025
-
5.5
MEDIUMCVE-2024-40860
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of the file system.... Read more
Affected Products : macos- Published: Sep. 17, 2024
- Modified: Mar. 25, 2025
-
5.5
MEDIUMCVE-2024-40850
A file access issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to access... Read more
- Published: Sep. 17, 2024
- Modified: Mar. 22, 2025
-
5.5
MEDIUMCVE-2024-40847
The issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access sensitive user data.... Read more
Affected Products : macos- Published: Sep. 17, 2024
- Modified: Mar. 25, 2025
-
5.5
MEDIUMCVE-2024-40845
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted video file may lead to unexpected app termination.... Read more
Affected Products : macos- Published: Sep. 17, 2024
- Modified: Mar. 14, 2025
-
5.5
MEDIUMCVE-2024-40835
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, macOS Sonoma 14.6. A shortcut may be able to use sensitive data wit... Read more
- Published: Jul. 29, 2024
- Modified: Mar. 18, 2025
-
5.5
MEDIUMCVE-2024-40823
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- Published: Jul. 29, 2024
- Modified: Mar. 24, 2025
-
5.5
MEDIUMCVE-2024-40816
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A local attacker may be able to cause unexpected system shutdown.... Read more
Affected Products : macos- Published: Jul. 29, 2024
- Modified: Mar. 25, 2025
-
5.5
MEDIUMCVE-2024-40801
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access protected user data.... Read more
Affected Products : macos- Published: Sep. 17, 2024
- Modified: Mar. 25, 2025
-
5.5
MEDIUMCVE-2024-40777
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing a maliciously crafted file may lead to unexpected app terminat... Read more
- Published: Jul. 29, 2024
- Modified: Mar. 13, 2025
-
5.5
MEDIUMCVE-2024-39385
Premiere Pro versions 24.5, 23.6.8 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue r... Read more
- Published: Sep. 13, 2024
- Modified: Sep. 16, 2024
-
5.5
MEDIUMCVE-2024-38122
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 +10 more products- Published: Aug. 13, 2024
- Modified: Aug. 16, 2024
-
5.5
MEDIUMCVE-2024-38041
Windows Kernel Information Disclosure Vulnerability... Read more
Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 windows_11_22h2 windows +3 more products- Published: Jul. 09, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-34140
Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this ... Read more
Affected Products : bridge- Published: Jul. 09, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-34134
Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this iss... Read more
- Published: Aug. 14, 2024
- Modified: Sep. 16, 2024
-
5.5
MEDIUMCVE-2024-30312
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.... Read more
- Published: May. 15, 2024
- Modified: Dec. 02, 2024
-
5.5
MEDIUMCVE-2024-30285
Audition versions 24.2, 23.6.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to crash the application, leading to a denial... Read more
Affected Products : audition- Published: Jun. 13, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-30276
Audition versions 24.2, 23.6.4 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of thi... Read more
Affected Products : audition- Published: Jun. 13, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-30037
Windows Common Log File System Driver Elevation of Privilege Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 +9 more products- Published: May. 14, 2024
- Modified: Jan. 08, 2025