CVE Vulnerability Catalog

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and potentially result in denial-of-service conditions on affected devices.

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.

Bridge versions 15.1.2, 16.0 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.

InCopy versions 21.0, 19.5.5 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.

Illustrator versions 29.8.3, 30.0 and earlier are affected by an untrusted search path vulnerability that could allow arbitrary code execution in the context of the current user. An attacker could modify the search path to point to a malicious program, which the application would then execute. Exploitation requires user interaction, such as opening a malicious file, and the scope is changed.

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an access of uninitialized pointer vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an access of uninitialized pointer vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.

Dreamweaver Desktop versions 21.6 and earlier are affected by an incorrect authorization vulnerability that could allow arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to bypass security measures and execute unauthorized code. Exploitation requires user interaction, such as opening a malicious file.

Dreamweaver Desktop versions 21.6 and earlier are affected by an improper input validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation requires user interaction, such as opening a malicious file, and the scope is changed.

Dreamweaver Desktop versions 21.6 and earlier are affected by an improper input validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file, and the scope is changed.

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file, and the scope is changed.

Dreamweaver Desktop versions 21.6 and earlier are affected by an OS Command Injection vulnerability that could lead to arbitrary code execution by an attacker. Exploitation requires user interaction, as a victim must open a malicious file, and the scope is changed.

Deserializacja nieufnych danych w bibliotece klienta Azure Core dla Pythona umożliwia autoryzowanemu atakującemu wykonanie kodu przez sieć.

Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

A race condition exists in the Capability Access Management Service (camsvc) due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.

Wykorzystanie po zwolnieniu pamięci w obiektach COM skrzynki odbiorczej umożliwia nieautoryzowanemu atakującemu wykonanie kodu lokalnie.

Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.