VendorsMicrosoftwindowsall versions
Vulnerabilities

Microsoft Windows

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10351CVEs
CVE-2017-2956
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the navigation pane. Successful exploitation could lead to arbitrary code execution.
Published 2017-01-11 · Modified
9.3EPSS 0.035
CVE-2022-28271
Adobe Photoshop PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
Published 2022-05-06 · Modified
9.3EPSS 0.035
CVE-2020-9566
Adobe Bridge versions 10.0.1 and earlier version have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Published 2020-06-26 · Modified
9.3EPSS 0.035
CVE-2020-3712
Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Published 2020-01-29 · Modified
9.3EPSS 0.035
CVE-2019-8253
Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Published 2019-12-19 · Modified
9.3EPSS 0.035
CVE-2019-8254
Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Published 2019-12-19 · Modified
9.3EPSS 0.035
CVE-2020-3711
Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Published 2020-01-29 · Modified
9.3EPSS 0.035
CVE-2009-3384
Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.
Published 2009-11-13 · Modified
9.3EPSS 0.035
CVE-2021-21050
Adobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution Vulnerability
Published 2021-02-11 · Modified
9.3EPSS 0.035
CVE-2021-21049
Adobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution Vulnerability
Published 2021-02-11 · Modified
9.3EPSS 0.035
CVE-2021-21101
Adobe Illustrator TTF font parsing out-of-bounds write vulnerability could lead to remote code execution
Published 2021-06-28 · Modified
9.3EPSS 0.035
CVE-2021-36015
Adobe Media Encoder Memory Corruption Could Lead To Remote Code Execution
Published 2021-08-20 · Modified
9.3EPSS 0.035
CVE-2017-3019
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) format parser. Successful exploitation could lead to arbitrary code execution.
Published 2017-04-12 · Modified
9.3EPSS 0.035
CVE-2017-3025
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability related to internal object representation manipulation. Successful exploitation could lead to arbitrary code execution.
Published 2017-04-12 · Modified
9.3EPSS 0.035
CVE-2017-3030
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the AES module. Successful exploitation could lead to arbitrary code execution.
Published 2017-04-12 · Modified
9.3EPSS 0.035
CVE-2017-3039
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the PPKLite security handler. Successful exploitation could lead to arbitrary code execution.
Published 2017-04-12 · Modified
9.3EPSS 0.035
CVE-2022-24103
Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
Published 2022-05-11 · Modified
9.3EPSS 0.035
CVE-2018-15987
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
Published 2019-01-18 · Modified
9.3EPSS 0.034
CVE-2021-28607
Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution
Published 2021-08-24 · Modified
9.3EPSS 0.034
CVE-2020-9571
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Published 2020-06-26 · Modified
9.3EPSS 0.034
CVE-2020-9574
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
Published 2020-06-26 · Modified
9.3EPSS 0.034
CVE-2020-9570
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
Published 2020-06-26 · Modified
9.3EPSS 0.034
CVE-2020-9573
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Published 2020-06-26 · Modified
9.3EPSS 0.034
CVE-2017-3013
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in a DLL related to remote logging.
Published 2017-04-12 · Modified
9.3EPSS 0.034
CVE-2012-0667
Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTVR movie file.
Published 2012-05-16 · Modified
9.3EPSS 0.034
CVE-2009-4243
RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allow remote attackers to have an unspecified impact via a crafted media file that uses HTTP chunked transfer coding, related to an "overflow."
Published 2010-01-25 · Modified
9.3EPSS 0.034
CVE-2022-28231
Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability
Published 2022-05-11 · Modified
9.3EPSS 0.034
CVE-2022-28239
Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability
Published 2022-05-11 · Modified
9.3EPSS 0.034
CVE-2017-3065
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the font manipulation functionality. Successful exploitation could lead to arbitrary code execution.
Published 2017-04-12 · Modified
9.3EPSS 0.034
CVE-2017-3040
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 image compression module. Successful exploitation could lead to arbitrary code execution.
Published 2017-04-12 · Modified
9.3EPSS 0.034
CVE-2017-3041
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when parsing font data in the MakeAccessible plugin. Successful exploitation could lead to arbitrary code execution.
Published 2017-04-12 · Modified
9.3EPSS 0.034
CVE-2017-3054
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to manipulation of EMF files. Successful exploitation could lead to arbitrary code execution.
Published 2017-04-12 · Modified
9.3EPSS 0.034
CVE-2017-3056
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JavaScript engine, related to string manipulation. Successful exploitation could lead to arbitrary code execution.
Published 2017-04-12 · Modified
9.3EPSS 0.034
CVE-2020-9572
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Published 2020-06-26 · Modified
9.3EPSS 0.033
CVE-2017-2941
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution.
Published 2017-01-11 · Modified
9.3EPSS 0.033
CVE-2017-2964
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to the parsing of JPEG EXIF metadata. Successful exploitation could lead to arbitrary code execution.
Published 2017-01-11 · Modified
9.3EPSS 0.033
CVE-2017-2967
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the XFA engine related to a form's structure and organization. Successful exploitation could lead to arbitrary code execution.
Published 2017-01-11 · Modified
9.3EPSS 0.033
CVE-2020-9659
Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Published 2020-06-25 · Modified
9.3EPSS 0.033
CVE-2010-0658
Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service (memory corruption and application crash) via vectors involving CANVAS elements.
Published 2010-02-18 · Modified
9.3EPSS 0.033
CVE-2021-21103
Adobe Illustrator memory corruption vulnerability could lead to information disclosure
Published 2021-09-08 · Modified
9.3EPSS 0.033
← Prev61 / 259Next →