Latest CVE Feed
-
7.8
HIGHCVE-2017-3007
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used to find resources, related to Creative Cloud desktop applications.... Read more
- Published: Apr. 12, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-7030
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2951
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality. Successful exploitation could lead to arbitrary co... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2965
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to TIFF file parsing. Successful exploitation could lead to a... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-7098
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" co... Read more
- Published: Oct. 23, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2956
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the navigation pane. Successful exploitation could ... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2953
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when processing a TIFF image. Successful exploitation could lead to ar... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2967
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and organization. Successful exploitation could lead ... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-7184
The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based ... Read more
- Published: Mar. 19, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2952
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing tags in TIFF files. Successful exploitati... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-7244
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.... Read more
Affected Products : pcre- Published: Mar. 23, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2970
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XSLT engine related to template manipulation. Successful exploitation could lead to arbitrary code... Read more
- Published: Jan. 24, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-7261
The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 does not check for a zero value of certain levels data, which allows local users to cause a denial of service (ZERO_SIZE_PTR dereference, a... Read more
Affected Products : linux_kernel- Published: Mar. 24, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-7475
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.... Read more
Affected Products : cairo- Published: May. 19, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2957
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to ... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2961
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to validation functionality. Successful exploitation could lead to arbitrary ... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2972
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module related to JPEG parsing. Successful exploitation could lead to arbitra... Read more
- Published: Jan. 24, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.... Read more
Affected Products : tpm2.0-tools- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2954
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module when handling malformed TIFF images. Successful exploitation could lea... Read more
- Published: Jan. 11, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-7592
The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.... Read more
Affected Products : libtiff- Published: Apr. 09, 2017
- Modified: Apr. 20, 2025