CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-34263 – Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-34263
11 Aug 2022 — Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. • https://helpx.adobe.com/security/products/illustrator/apsb22-41.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0CVE-2022-35666 – Adobe Acrobat Reader Improper Input Validation Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-35666
11 Aug 2022 — Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. • https://helpx.adobe.com/security/products/acrobat/apsb22-39.html • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0CVE-2022-35667 – Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-35667
11 Aug 2022 — Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. • https://helpx.adobe.com/security/products/acrobat/apsb22-39.html • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0CVE-2022-35665 – Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution
https://notcve.org/view.php?id=CVE-2022-35665
11 Aug 2022 — Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. • https://helpx.adobe.com/security/products/acrobat/apsb22-39.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 1%CPEs: 3EXPL: 0CVE-2022-35677 – Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-35677
11 Aug 2022 — Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. • https://helpx.adobe.com/security/products/framemaker/apsb22-42.html • CWE-122: Heap-based Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2022-35675 – Adobe FrameMaker SVG File Parsing Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-35675
11 Aug 2022 — Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. • https://helpx.adobe.com/security/products/framemaker/apsb22-42.html • CWE-416: Use After Free •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2022-36270
https://notcve.org/view.php?id=CVE-2022-36270
10 Aug 2022 — Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php. • https://github.com/FF9118/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/RCE-1.md •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-30580 – Empty Cmd.Path can trigger unintended binary in os/exec on Windows
https://notcve.org/view.php?id=CVE-2022-30580
09 Aug 2022 — Code injection in Cmd.Start in os/exec before Go 1.17.11 and Go 1.18.3 allows execution of any binaries in the working directory named either "..com" or "..exe" by calling Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path is unset. • https://go.dev/cl/403759 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-32543
https://notcve.org/view.php?id=CVE-2022-32543
05 Aug 2022 — A specially-crafted OLE file can lead to a heap buffer overflow which can result in arbitrary code execution. • https://talosintelligence.com/vulnerability_reports/TALOS-2022-1527 • CWE-190: Integer Overflow or Wraparound CWE-680: Integer Overflow to Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-29886
https://notcve.org/view.php?id=CVE-2022-29886
05 Aug 2022 — A specially-crafted OLE file can lead to a heap buffer overflow, which can result in arbitrary code execution. • https://talosintelligence.com/vulnerability_reports/TALOS-2022-1533 • CWE-190: Integer Overflow or Wraparound CWE-680: Integer Overflow to Buffer Overflow •