Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malic...
Product
Adobe digital editions vulnerabilities
71 published CVES affecting Adobe digital editions, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 71
- Critical
- 27
- High
- 30
- Medium
- 13
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Latest Adobe digital editions CVEs
Newest publication first · page 1 of 3
-
HighCVSS 7.8 EPSS 0.33%
-
MediumCVSS 6.5 EPSS 1.5%
Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by a privilege escalation vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation...
-
MediumCVSS 6.5 EPSS 1.5%
Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before pr...
-
HighCVSS 8.6 EPSS 2.1%
Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must...
-
HighCVSS 7.8 EPSS 1.7%
Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary file system write in the context of the current user. Exploitatio...
-
MediumCVSS 6.5 EPSS 4.8%
Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration (host or local network) vulnerability. Successful exploitation could lead to information disclosure.
-
HighCVSS 7.5 EPSS 4.2%
Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure.
-
CriticalCVSS 9.8 EPSS 7.1%
Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
-
CriticalCVSS 9.8 EPSS 9.1%
Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
-
HighCVSS 7.5 EPSS 3.5%
Adobe Digital Editions versions 4.5.9 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.
-
CriticalCVSS 9.8 EPSS 8.3%
Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
-
CriticalCVSS 9.8 EPSS 8.0%
Adobe Digital Editions versions 4.5.8 and below have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
-
HighCVSS 7.5 EPSS 4.0%
Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.
-
HighCVSS 7.5 EPSS 4.0%
Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.
-
HighCVSS 7.5 EPSS 4.0%
Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.
-
HighCVSS 7.5 EPSS 4.0%
Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.
-
HighCVSS 7.5 EPSS 4.0%
Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.
-
CriticalCVSS 9.8 EPSS 11.2%
Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
-
CriticalCVSS 9.8 EPSS 11.2%
Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
-
MediumCVSS 5.5 EPSS 5.8%
Adobe Digital Editions versions 4.5.7 and below have an exploitable Stack Overflow vulnerability. Successful exploitation could lead to information disclosure.
-
HighCVSS 7.5 EPSS 3.7%
Adobe Digital Editions versions 4.5.7 and below have an exploitable Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
-
MediumCVSS 5.3 EPSS 3.2%
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses.
-
MediumCVSS 5.3 EPSS 3.2%
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses.
-
MediumCVSS 5.3 EPSS 3.2%
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses.
-
MediumCVSS 5.3 EPSS 3.2%
An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.