Microsoft Windows

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where improper access controls may allow a user to access arbitrary physical memory, leading to an escalation of privileges.

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where improper access controls allow a regular user to write a part of the registry intended for privileged users only, leading to escalation of privileges.

When Animate parses FLA files, there is an out-of-bounds write vulnerability at animate+0x123df28

Acrobat Reader | Out-of-bounds Read (CWE-125)

When Adobe Animate parses FLA files, there is a heap out-of-bounds write vulnerability at Animate.exe+0x125D391

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker.

After Effects | Heap-based Buffer Overflow (CWE-122)

After Effects | Out-of-bounds Write (CWE-787)

After Effects | Out-of-bounds Write (CWE-787)

After Effects | Out-of-bounds Write (CWE-787)

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Photoshop Desktop | Out-of-bounds Write (CWE-787)

Adobe Illustrator Improper Input Validation Remote Code Execution Vulnerability

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Acrobat Reader | Access of Uninitialized Pointer (CWE-824)

Photoshop Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Illustrator | Out-of-bounds Write (CWE-787)

ZDI-CAN-19412: Adobe Dimension GLTF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges.

ZDI-CAN-21764: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-CAN-20212: Adobe Dimension USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-CAN-20031: Adobe Dimension OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Discord WINSTA.dll uncontrolled search path

ZDI-CAN-21684: Adobe Audition MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability IV.

Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability III.

SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The issue is with the ASE installer and does not impact other ASE binaries.

Dreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges.

Adobe InCopy has an integer overflow vulnerability when parsing SVG file

Illustrator | Stack-based Buffer Overflow (CWE-121)

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Adobe Photoshop PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe After Effects Improper Input Validation Remote Code Execution Vulnerability

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators.

InDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

Acrobat Reader | Integer Overflow or Wraparound (CWE-190)

Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)