CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Funkcja resend_bytes w pliku roaming_common.c w kliencie OpenSSH w wersjach 5.x, 6.x i 7.x przed 7.1p2 umożliwia zdalnym serwerom uzyskanie wrażliwych informacji z pamięci procesu poprzez żądanie przesłania całego bufora, co może prowadzić do odczytu prywatnego klucza.
There is an untrusted search path vulnerability in Adobe Download Manager that allows local users to gain privileges via a crafted resource in an unspecified directory. This affects Adobe Reader and Acrobat versions before 11.0.14, and Acrobat and Acrobat Reader DC Classic before 15.006.30119 and DC Continuous before 15.010.20056 on Windows and OS X.
Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the Global object, allowing attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Adobe Reader and Acrobat before 11.0.14, and Acrobat and Acrobat Reader DC Classic before 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11.0.14, and Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code.
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, and Acrobat and Acrobat Reader DC Classic before 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code.
Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service via unspecified vectors. This is a different vulnerability than CVE-2016-0931, CVE-2016-0933, CVE-2016-0936, CVE-2016-0938, CVE-2016-0942, CVE-2016-0944, CVE-2016-0945, and CVE-2016-0946.
The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14, and Acrobat and Acrobat Reader DC Classic before 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
A use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, and in Acrobat and Acrobat Reader DC Classic before 15.006.30119, as well as in Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X, allows attackers to execute arbitrary code.
Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG 2000 data.
A double free vulnerability in Adobe Reader and Acrobat before version 11.0.14, and in Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as in Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allows attackers to execute arbitrary code via a crafted ExtGState dictionary.
A use-after-free vulnerability in AGM.dll in Adobe Reader and Acrobat before version 11.0.14, and in Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as in Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allows attackers to execute arbitrary code via a multiple-layer PDF document.
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, and in Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X.
Adobe Reader and Acrobat before version 11.0.14, and Acrobat and Acrobat Reader DC Classic before version 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before version 15.010.20056 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FileAttachment annotation.
The canonpath function in the File::Spec module in PathTools before version 3.62 does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header.