Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

20 records in Prelude · all components

TI-2020-07767 CVE-2020-9680 · GHSA-8m8x-whvq-8mjm

Out-of-bounds write in Adobe Prelude

Priority MEDIUM 45

Adobe Prelude versions 9.0 and earlier have an out-of-bounds write vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0391 Published 2020-07-22 No fix listed CWE-787
TI-2020-07765 CVE-2020-9678 · GHSA-xgcj-c5c8-wm98

Out-of-bounds write in Adobe Prelude

Priority MEDIUM 45

Adobe Prelude versions 9.0 and earlier have an out-of-bounds write vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03966 Published 2020-07-22 No fix listed CWE-787
TI-2020-07764 CVE-2020-9677 · GHSA-87hv-wrhm-fv9f

Out-of-bounds read in Adobe Prelude

Priority MEDIUM 45

Adobe Prelude versions 9.0 and earlier have an out-of-bounds read vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04528 Published 2020-07-22 No fix listed CWE-125
Priority MEDIUM 40

Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially resulting in arbitrary code execution in the context of the current…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02012 Published 2021-11-22 No fix listed CWE-788
Priority MEDIUM 40

Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01746 Published 2021-11-22 No fix listed CWE-788
Priority MEDIUM 40

Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the context of the current…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01775 Published 2021-11-22 No fix listed CWE-788
Priority MEDIUM 40

Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01775 Published 2021-11-22 No fix listed CWE-788
Priority MEDIUM 40

Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01733 Published 2021-11-22 No fix listed CWE-788
Priority LOW 39

Adobe Prelude version 22.1.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01686 Published 2022-06-15 No fix listed CWE-787
Priority LOW 38

Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01775 Published 2021-11-22 No fix listed CWE-788
TI-2020-07766 CVE-2020-9679 · GHSA-w5pf-gqqf-7mw9

Out-of-bounds read in Adobe Prelude

Priority LOW 37

Adobe Prelude versions 9.0 and earlier have an out-of-bounds read vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.04848 Published 2020-07-22 No fix listed CWE-125
Priority LOW 32

Adobe Prelude version 9.0.1 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00646 Published 2020-12-11 No fix listed CWE-427
Open these records in search →