Adobe Animate vulnerabilities

Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

An Incorrect Authorization vulnerability in Animate could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction but depends on conditions beyond the attacker's control. The scope of the vulnerability has changed.

A NULL Pointer Dereference vulnerability in Adobe Animate versions 23.0.13, 24.0.10 and earlier could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation requires user interaction in that a victim must open a malicious file.

An out-of-bounds read vulnerability in Adobe Animate versions 23.0.13, 24.0.10 and earlier could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation requires user interaction in that a victim must open a malicious file.