CVE Vulnerability Catalog

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

An SSRF vulnerability in ColdFusion allows a low-privileged attacker to bypass security measures and gain unauthorized read access. Exploitation does not require user interaction and the scope is changed.

ColdFusion suffers from an Improper Input Validation vulnerability that allows a security feature bypass. A low-privileged attacker can exploit this to gain unauthorized read access without user interaction. The scope of the vulnerability is changed.

ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. The vulnerable component is restricted to an administrative network zone by default. Exploitation requires user interaction and the scope is changed.

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.

After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control and does not require user interaction. The scope has changed.

Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Premiere Pro is affected by a heap-based buffer overflow vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.

Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

NVIDIA TensorRT-LLM contains a vulnerability that could allow an attacker to trigger a write-what-where condition. Successful exploitation may lead to data tampering, denial of service, and information disclosure.

A vulnerability in NVIDIA TensorRT-LLM's inter-process communication layer allows an attacker with local same-user access to trigger deserialization. Successful exploitation could lead to code execution, information disclosure, data tampering, and denial of service.

A vulnerability in NVIDIA TensorRT-LLM during tensor deserialization allows an attacker to trigger a heap-based buffer overflow. This could lead to information disclosure, data tampering, or denial of service.

NVIDIA TensorRT contains a vulnerability that may cause a heap-based buffer overflow. An attacker could exploit this flaw to achieve code execution.

A vulnerability in NVIDIA TensorRT allows an attacker to cause a heap-based buffer overflow, potentially leading to code execution.

A vulnerability in NVIDIA TensorRT allows an attacker to cause improper validation of an array index. Successful exploitation could lead to code execution.

NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, allowing a local, unauthenticated attacker to deserialize untrusted data. Successful exploitation could lead to code execution, privilege escalation, data tampering, and information disclosure.

A vulnerability in NVIDIA TensorRT-LLM for Linux within the disaggregated orchestrator component allows an attacker to read, write, or delete internal cluster state by sending requests to the FastAPI server. Successful exploitation could lead to information disclosure, data tampering, and denial of service.

A use-after-free vulnerability in the UI component of Google Chrome on Linux prior to version 150.0.7871.125 was discovered. A remote attacker could convince a user to perform specific UI gestures, potentially exploiting heap corruption via a crafted HTML page.