Adobe Digital Editions vulnerabilities

71 known vulnerabilities affecting adobe/digital_editions.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL29HIGH28MEDIUM13LOW1

Vulnerabilities

SortPage 1 of 4

CVE-2016-0954P2CRITICALCVSS 9.8PoC≤ 4.5.02016-03-09

CVE-2016-0954 [CRITICAL] CWE-119 CVE-2016-0954: Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

nvd

CVE-2020-3760P3CRITICALCVSS 9.8≤ 4.5.102020-02-13

CVE-2020-3760 [CRITICAL] CWE-77 CVE-2020-3760: Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2019-7095P3CRITICALCVSS 9.8≤ 4.5.10.1857492019-05-24

CVE-2019-7095 [CRITICAL] CWE-787 CVE-2019-7095: Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successf Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-3088P3CRITICALCVSS 10.0≤ 4.5.42017-06-20

CVE-2017-3088 [CRITICAL] CWE-119 CVE-2017-3088: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerabilit Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2018-12814P3CRITICALCVSS 9.8≤ 4.5.82018-10-17

CVE-2018-12814 [CRITICAL] CWE-787 CVE-2018-12814: Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful explo Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2018-12813P3CRITICALCVSS 9.8≤ 4.5.82018-10-17

CVE-2018-12813 [CRITICAL] CWE-787 CVE-2018-12813: Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful explo Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-2973P3CRITICALCVSS 9.8≤ 4.5.32017-02-15

CVE-2017-2973 [CRITICAL] CWE-119 CVE-2017-2973: Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability. S Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-3090P3CRITICALCVSS 9.8≤ 4.5.42017-06-20

CVE-2017-3090 [CRITICAL] CWE-427 CVE-2017-3090: Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-11272P3HIGHCVSS 7.5≤ 4.5.52017-08-11

CVE-2017-11272 [HIGH] CWE-200 CVE-2017-11272: Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability. Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability.

nvd

CVE-2016-4263P3CRITICALCVSS 9.8≤ 4.5.12016-09-16

CVE-2016-4263 [CRITICAL] CWE-416 CVE-2016-4263: Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbi Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors.

nvd

CVE-2016-6980P3CRITICALCVSS 9.8≤ 4.5.12016-09-26

CVE-2016-6980 [CRITICAL] CVE-2016-6980: Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbi Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4263.

nvd

CVE-2017-3092P3CRITICALCVSS 9.8≤ 4.5.42017-06-20

CVE-2017-3092 [CRITICAL] CWE-427 CVE-2017-3092: Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library functions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

nvd

CVE-2018-12823P3CRITICALCVSS 9.8≤ 4.5.82018-10-17

CVE-2018-12823 [CRITICAL] CWE-787 CVE-2018-12823: Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful explo Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2018-12822P3CRITICALCVSS 9.8≤ 4.5.82018-10-17

CVE-2018-12822 [CRITICAL] CWE-416 CVE-2018-12822: Adobe Digital Editions versions 4.5.8 and below have an use after free vulnerability. Successful exp Adobe Digital Editions versions 4.5.8 and below have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-3097P3CRITICALCVSS 9.8≤ 4.5.42017-06-20

CVE-2017-3097 [CRITICAL] CWE-427 CVE-2017-3097: Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-3094P3CRITICALCVSS 9.8≤ 4.5.42017-06-20

CVE-2017-3094 [CRITICAL] CWE-119 CVE-2017-3094: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerabilit Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF processing engine. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-11274P3CRITICALCVSS 9.8≤ 4.5.52017-08-11

CVE-2017-11274 [CRITICAL] CWE-416 CVE-2017-11274: Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-3095P3CRITICALCVSS 9.8v4.5.42017-06-20

CVE-2017-3095 [CRITICAL] CWE-119 CVE-2017-3095: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerabilit Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing engine. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-3093P3CRITICALCVSS 9.8≤ 4.5.42017-06-20

CVE-2017-3093 [CRITICAL] CWE-119 CVE-2017-3093: Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerabilit Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap representation module. Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-11275P3HIGHCVSS 7.5≤ 4.5.52017-08-11

CVE-2017-11275 [HIGH] CWE-119 CVE-2017-11275: Adobe Digital Editions 4.5.4 and earlier has an exploitable heap overflow vulnerability. Successful Adobe Digital Editions 4.5.4 and earlier has an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

nvd

1 / 4Next →