5.5

CVSS3.1

CVE-2024-30311 - TALOS-2024-1946 - Adobe Acrobat Reader Font gvar GlyphVariationData out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user in…

πŸ“… Published: May 15, 2024, 10 a.m. πŸ”„ Last Modified: Feb. 13, 2025, 5:47 p.m.

7.8

CVSS3.1

CVE-2024-34095 - ZDI-CAN-23475: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

πŸ“… Published: May 15, 2024, 10 a.m. πŸ”„ Last Modified: Dec. 2, 2024, 9:22 p.m.

7.8

CVSS3.1

CVE-2024-34099 - ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 2 of 2

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

πŸ“… Published: May 15, 2024, 10 a.m. πŸ”„ Last Modified: Dec. 2, 2024, 9:22 p.m.

7.8

CVSS3.1

CVE-2024-34096 - ZDI-CAN-23472: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

πŸ“… Published: May 15, 2024, 10 a.m. πŸ”„ Last Modified: Dec. 2, 2024, 9:22 p.m.

7.8

CVSS3.1

CVE-2024-34097 - ZDI-CAN-23473: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

πŸ“… Published: May 15, 2024, 10 a.m. πŸ”„ Last Modified: Dec. 2, 2024, 9:22 p.m.

7.8

CVSS3.1

CVE-2024-34094 - ZDI-CAN-23474: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

πŸ“… Published: May 15, 2024, 10 a.m. πŸ”„ Last Modified: Dec. 2, 2024, 9:22 p.m.

7.8

CVSS3.1

CVE-2024-30310 - ZDI-CAN-23327: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Write Remote Code Execution V…

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

πŸ“… Published: May 15, 2024, 10 a.m. πŸ”„ Last Modified: Dec. 2, 2024, 9:22 p.m.

8.8

CVSS3.1

CVE-2024-4010 - Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request

The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on the handle_ajax_request function in all versions up to, and including, 5.7.19. This makes it possible for authentic…

πŸ“… Published: May 15, 2024, 8:34 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

6.4

CVSS3.1

CVE-2024-4636 - Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF <= 3.12.10 - Authenticated (Au…

The Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the β€˜allow_meme_types’ function in versions up to, and including, 3.12.10 due to insufficient input sanitization and output escaping. This makes it possible…

πŸ“… Published: May 15, 2024, 6:51 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

5.5

CVSS3.1

CVE-2024-3824 - Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

πŸ“… Published: May 15, 2024, 6 a.m. πŸ”„ Last Modified: May 15, 2025, 1:26 p.m.
Total resulsts: 349182
Page 9853 of 34,919
Β« previous page Β» next page
Filters