Security Vulnerabilities - CVEs Published In August 2017
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score
8.8
EPSS Score
0.083
Published
2017-08-11
Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect.
CVSS Score
7.4
EPSS Score
0.008
Published
2017-08-11
Adobe Digital Editions 4.5.4 and earlier versions 4.5.4 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score
7.5
EPSS Score
0.116
Published
2017-08-11
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
CVSS Score
8.8
EPSS Score
0.646
Published
2017-08-11
Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability.
CVSS Score
7.5
EPSS Score
0.096
Published
2017-08-11
Adobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability.
CVSS Score
9.8
EPSS Score
0.132
Published
2017-08-11
Adobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability.
CVSS Score
7.5
EPSS Score
0.096
Published
2017-08-11
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in JavaScript engine when creating large strings. Successful exploitation could lead to arbitrary code execution.
CVSS Score
8.8
EPSS Score
0.048
Published
2017-08-11
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an information disclosure vulnerability when handling links in a PDF document.
CVSS Score
6.5
EPSS Score
0.079
Published
2017-08-11
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the MakeAccessible plugin when parsing TrueType font data. Successful exploitation could lead to arbitrary code execution.
CVSS Score
8.8
EPSS Score
0.087
Published
2017-08-11