Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 9.3

    HIGH
    CVE-2021-36076

    Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is require... Read more

    Affected Products : windows bridge
    • EPSS Score: %1.58
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36075

    Adobe Bridge version 11.1 (and earlier) is affected by a Buffer Overflow vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required ... Read more

    Affected Products : windows bridge
    • EPSS Score: %1.96
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 4.3

    MEDIUM
    CVE-2021-36074

    Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue re... Read more

    Affected Products : windows bridge
    • EPSS Score: %1.43
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36073

    Adobe Bridge version 11.1 (and earlier) is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issu... Read more

    Affected Products : windows bridge
    • EPSS Score: %3.22
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36072

    Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open... Read more

    Affected Products : windows bridge
    • EPSS Score: %0.88
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 4.3

    MEDIUM
    CVE-2021-36071

    Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue re... Read more

    Affected Products : windows bridge
    • EPSS Score: %2.29
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36070

    Adobe Media Encoder version 15.1 (and earlier) is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this ... Read more

    Affected Products : media_encoder windows
    • EPSS Score: %0.80
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36069

    Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is require... Read more

    Affected Products : windows bridge
    • EPSS Score: %0.95
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36068

    Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is require... Read more

    Affected Products : windows bridge
    • EPSS Score: %1.58
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36067

    Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is require... Read more

    Affected Products : windows bridge
    • EPSS Score: %0.95
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36066

    Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac... Read more

    Affected Products : macos windows photoshop
    • EPSS Score: %1.67
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36065

    Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by a heap-based buffer overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i... Read more

    Affected Products : macos windows photoshop
    • EPSS Score: %5.69
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36064

    XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a m... Read more

    • EPSS Score: %0.85
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 6.1

    MEDIUM
    CVE-2021-36063

    Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browse... Read more

    Affected Products : connect
    • EPSS Score: %1.19
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 6.1

    MEDIUM
    CVE-2021-36062

    Adobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. If an attacker is able to convince a victim to visit a UR... Read more

    Affected Products : connect
    • EPSS Score: %0.69
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 5.4

    MEDIUM
    CVE-2021-36061

    Adobe Connect version 11.2.2 (and earlier) is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnerability to edit or delete recordings on the Connect environment.... Read more

    Affected Products : connect
    • EPSS Score: %0.96
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 5.5

    MEDIUM
    CVE-2021-36060

    Adobe Media Encoder version 15.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this iss... Read more

    Affected Products : media_encoder windows
    • EPSS Score: %0.02
    • Published: Sep. 06, 2023
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-36059

    Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is require... Read more

    Affected Products : windows bridge
    • EPSS Score: %0.95
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 5.5

    MEDIUM
    CVE-2021-36058

    XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Integer Overflow vulnerability potentially resulting in application-level denial of service in the context of the current user. Exploitation requires user interaction in that a victim must ope... Read more

    • EPSS Score: %0.58
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
  • 4.0

    MEDIUM
    CVE-2021-36057

    XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local applic... Read more

    • EPSS Score: %0.06
    • Published: Sep. 01, 2021
    • Modified: Nov. 21, 2024
Showing 20 of 291526 Results