CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A use-after-free vulnerability in Adobe Reader and Acrobat before version 11.0.16, and in Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as in Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Reader and Acrobat before version 11.0.16, and in Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as in Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allows attackers to execute arbitrary code.
A use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, and Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code.
A use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, and Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code.
A use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, and Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code.
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, and Acrobat and Acrobat Reader DC Classic before 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, and Acrobat and Acrobat Reader DC Classic before 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X, allows attackers to execute arbitrary code via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.16, and Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Integer overflow in Adobe Reader and Acrobat before 11.0.16, and in Acrobat and Acrobat Reader DC Classic before 15.006.30172, as well as in Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.16, and Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.16, and Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.16, and Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.16, and Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.16, and Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Adobe Reader and Acrobat before version 11.0.16, and Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player w wersji 21.0.0.226 i wcześniejszych umożliwia zdalnym atakującym wykonanie dowolnego kodu poprzez nieokreślone wektory. Wykorzystanie tej podatności miało miejsce w maju 2016 roku.
Adobe ColdFusion versions 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor (SRM) Profiler before version 6.2.3 allow remote attackers to execute arbitrary SQL commands.
In libFLAC/stream_decoder.c in mediaserver in Android versions before 4.4.4, 5.0.2, 5.1.1, and 6.x before May 1, 2016, free operations on uninitialized memory are not prevented, allowing remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted media file.
In libAACdec in mediaserver in Android before version 4.4.4, 5.0.2, 5.1.1, and before May 1, 2016, the number of threads is not properly limited, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.