Vulnerabilidades en Adobe Systems Incorporated

144 resultados
Análisis Vexday

Com 144 CVEs catalogadas e nenhuma atualmente listada no catálogo KEV da CISA, a taxa de exploração ativa da Adobe Systems Incorporated neste conjunto está abaixo da média geral do catálogo. O único CVE de maior destaque é CVE-2017-11211, que concentra o maior escore EPSS observado (0,2707), indicando probabilidade não negligenciável de exploração, apesar da ausência de confirmação ativa. O tipo de falha mais frequente é CWE-79 (Cross-Site Scripting), o que sugere atenção contínua a controles de sanitização de entrada e saída nas implementações. A ausência de novas CVEs nos últimos 90 dias e o baixo volume de explorações confirmadas reduzem a urgência imediata, mas o PoC público disponível para a vulnerabilidade crítica merece monitoramento por equipes responsáveis por ambientes que ainda executam versões afetadas.

CVE-2017-11268—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an explEPSS 6.9%CVE-2017-11227—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an explEPSS 6.9%CVE-2017-11261—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an explEPSS 6.9%CVE-2017-11269—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an explEPSS 6.9%CVE-2017-11234—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an explEPSS 6.9%CVE-2017-11270—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an explEPSS 6.9%CVE-2017-11267—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an explEPSS 6.9%CVE-2017-3107—Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability.EPSS 6.8%CVE-2017-11279—Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary coEPSS 6.7%CVE-2017-11229—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a securEPSS 6.7%CVE-2017-3119—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an explEPSS 6.6%CVE-2017-11237—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an explEPSS 6.6%CVE-2017-11278—Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitraryEPSS 6.1%CVE-2017-11280—Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitraryEPSS 6.1%CVE-2017-11277—Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitraryEPSS 6.1%CVE-2017-11276—Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitraryEPSS 6.1%CVE-2017-3115—Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an infoEPSS 5.8%CVE-2017-3110—Adobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability.EPSS 5.3%CVE-2017-3085—Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performingEPSS 4.5%CVE-2019-8159—A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user wEPSS 3.3%