Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    NCSC-2024-0368

    Vulnerability from csaf_ncscnl - Published: 2024-09-11 09:31 - Updated: 2024-09-11 09:31
    Summary
    Kwetsbaarheden verholpen in Adobe producten
    Notes
    The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
    Feiten: Er zijn kwetsbaarheden verholpen in Adobe producten.
    Interpretaties: De kwetsbaarheden stellen een kwaadwillende in staat aanvallen uit te voeren die leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - (Remote) code execution (Gebruikersrechten) - Toegang tot systeemgegevens
    Oplossingen: Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
    Kans: medium
    Schade: high
    CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
    CWE-416: Use After Free
    CWE-190: Integer Overflow or Wraparound
    CWE-787: Out-of-bounds Write
    CWE-191: Integer Underflow (Wrap or Wraparound)
    CWE-122: Heap-based Buffer Overflow
    CWE-125: Out-of-bounds Read
    CWE-20: Improper Input Validation
    CWE-121: Stack-based Buffer Overflow
    CWE-476: NULL Pointer Dereference
    CWE-502: Deserialization of Untrusted Data
    CWE-190 - Integer Overflow or Wraparound
    Affected products
    Product Identifier Version Remediation
    illustrator_2024
    adobe
    cpe:2.3:a:adobe:illustrator_2024:*:*:*:*:*:*:*:*
    illustrator_2023
    adobe
    cpe:2.3:a:adobe:illustrator_2023:*:*:*:*:*:*:*:*
    CWE-787 - Out-of-bounds Write
    Affected products
    Product Identifier Version Remediation
    adobe_after_effects
    adobe
    cpe:2.3:a:adobe:adobe_after_effects:*:*:*:*:*:*:*:*
    after_effects
    adobe
    cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*
    CWE-787 - Out-of-bounds Write
    Affected products
    Product Identifier Version Remediation
    adobe_premiere_pro
    adobe
    cpe:2.3:a:adobe:adobe_premiere_pro:*:*:*:*:*:*:*:*
    premiere_pro
    adobe
    cpe:2.3:a:adobe:premiere_pro:*:*:*:*:*:*:*:*
    CWE-191 - Integer Underflow (Wrap or Wraparound)
    Affected products
    Product Identifier Version Remediation
    illustrator_2024
    adobe
    cpe:2.3:a:adobe:illustrator_2024:*:*:*:*:*:*:*:*
    illustrator_2023
    adobe
    cpe:2.3:a:adobe:illustrator_2023:*:*:*:*:*:*:*:*
    CWE-787 - Out-of-bounds Write
    Affected products
    Product Identifier Version Remediation
    adobe_after_effects
    adobe
    cpe:2.3:a:adobe:adobe_after_effects:*:*:*:*:*:*:*:*
    CWE-416 - Use After Free
    Affected products
    Product Identifier Version Remediation
    acrobat_dc
    adobe
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:*:*:*
    acrobat_reader_dc
    adobe
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:*:*:*:*
    acrobat_2024
    adobe
    cpe:2.3:a:adobe:acrobat_2024:*:*:*:*:*:*:*:*
    acrobat_2020
    adobe
    cpe:2.3:a:adobe:acrobat_2020:*:*:*:*:*:*:*:*
    acrobat_reader_2020
    adobe
    cpe:2.3:a:adobe:acrobat_reader_2020:*:*:*:*:*:*:*:*
    CWE-122 - Heap-based Buffer Overflow
    Affected products
    Product Identifier Version Remediation
    photoshop_2023
    adobe
    cpe:2.3:a:adobe:photoshop_2023:*:*:*:*:*:*:*:*
    photoshop_2024
    adobe
    cpe:2.3:a:adobe:photoshop_2024:*:*:*:*:*:*:*:*
    CWE-416 - Use After Free
    Affected products
    Product Identifier Version Remediation
    illustrator_2024
    adobe
    cpe:2.3:a:adobe:illustrator_2024:*:*:*:*:*:*:*:*
    illustrator_2023
    adobe
    cpe:2.3:a:adobe:illustrator_2023:*:*:*:*:*:*:*:*
    CWE-787 - Out-of-bounds Write
    Affected products
    Product Identifier Version Remediation
    photoshop_2023
    adobe
    cpe:2.3:a:adobe:photoshop_2023:*:*:*:*:*:*:*:*
    photoshop_2024
    adobe
    cpe:2.3:a:adobe:photoshop_2024:*:*:*:*:*:*:*:*
    photoshop
    adobe
    cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*
    CWE-787 - Out-of-bounds Write
    Affected products
    Product Identifier Version Remediation
    photoshop_2023
    adobe
    cpe:2.3:a:adobe:photoshop_2023:*:*:*:*:*:*:*:*
    photoshop_2024
    adobe
    cpe:2.3:a:adobe:photoshop_2024:*:*:*:*:*:*:*:*
    CWE-787 - Out-of-bounds Write
    Affected products
    Product Identifier Version Remediation
    photoshop_2023
    adobe
    cpe:2.3:a:adobe:photoshop_2023:*:*:*:*:*:*:*:*
    photoshop_2024
    adobe
    cpe:2.3:a:adobe:photoshop_2024:*:*:*:*:*:*:*:*
    CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Affected products
    Product Identifier Version Remediation
    acrobat_dc
    adobe
    cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:*:*:*
    acrobat_reader_dc
    adobe
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:*:*:*:*
    acrobat_2024
    adobe
    cpe:2.3:a:adobe:acrobat_2024:*:*:*:*:*:*:*:*
    acrobat_2020
    adobe
    cpe:2.3:a:adobe:acrobat_2020:*:*:*:*:*:*:*:*
    acrobat_reader_2020
    adobe
    cpe:2.3:a:adobe:acrobat_reader_2020:*:*:*:*:*:*:*:*
    CWE-122 - Heap-based Buffer Overflow
    Affected products
    Product Identifier Version Remediation
    adobe_after_effects
    adobe
    cpe:2.3:a:adobe:adobe_after_effects:*:*:*:*:*:*:*:*
    CWE-125 - Out-of-bounds Read
    Affected products
    Product Identifier Version Remediation
    adobe_after_effects
    adobe
    cpe:2.3:a:adobe:adobe_after_effects:*:*:*:*:*:*:*:*
    after_effects
    adobe
    cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*
    CWE-416 - Use After Free
    Affected products
    Product Identifier Version Remediation
    adobe_premiere_pro
    adobe
    cpe:2.3:a:adobe:adobe_premiere_pro:*:*:*:*:*:*:*:*
    premiere_pro
    adobe
    cpe:2.3:a:adobe:premiere_pro:*:*:*:*:*:*:*:*
    CWE-20 - Improper Input Validation
    Affected products
    Product Identifier Version Remediation
    illustrator
    adobe
    cpe:2.3:a:adobe:illustrator:27.9.2:*:*:*:*:*:*:*
    illustrator
    adobe
    cpe:2.3:a:adobe:illustrator:27.9.3:*:*:*:*:*:*:*
    illustrator
    adobe
    cpe:2.3:a:adobe:illustrator:27.9.4:*:*:*:*:*:*:*
    illustrator
    adobe
    cpe:2.3:a:adobe:illustrator:28.0:*:*:*:*:*:*:*
    illustrator
    adobe
    cpe:2.3:a:adobe:illustrator:0:*:*:*:*:*:*:*
    illustrator
    adobe
    cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*
    illustrator_2024
    adobe
    cpe:2.3:a:adobe:illustrator_2024:*:*:*:*:*:*:*:*
    illustrator_2023
    adobe
    cpe:2.3:a:adobe:illustrator_2023:*:*:*:*:*:*:*:*
    CWE-121 - Stack-based Buffer Overflow
    Affected products
    Product Identifier Version Remediation
    adobe_after_effects
    adobe
    cpe:2.3:a:adobe:adobe_after_effects:*:*:*:*:*:*:*:*
    CWE-476 - NULL Pointer Dereference
    Affected products
    Product Identifier Version Remediation
    illustrator_2024
    adobe
    cpe:2.3:a:adobe:illustrator_2024:*:*:*:*:*:*:*:*
    illustrator_2023
    adobe
    cpe:2.3:a:adobe:illustrator_2023:*:*:*:*:*:*:*:*
    CWE-125 - Out-of-bounds Read
    Affected products
    Product Identifier Version Remediation
    photoshop_2023
    adobe
    cpe:2.3:a:adobe:photoshop_2023:*:*:*:*:*:*:*:*
    photoshop_2024
    adobe
    cpe:2.3:a:adobe:photoshop_2024:*:*:*:*:*:*:*:*
    CWE-125 - Out-of-bounds Read
    Affected products
    Product Identifier Version Remediation
    illustrator_2024
    adobe
    cpe:2.3:a:adobe:illustrator_2024:*:*:*:*:*:*:*:*
    illustrator_2023
    adobe
    cpe:2.3:a:adobe:illustrator_2023:*:*:*:*:*:*:*:*
    CWE-502 - Deserialization of Untrusted Data
    Affected products
    Product Identifier Version Remediation
    coldfusion_2023
    adobe
    cpe:2.3:a:adobe:coldfusion_2023:*:*:*:*:*:*:*:*
    coldfusion_2021
    adobe
    cpe:2.3:a:adobe:coldfusion_2021:*:*:*:*:*:*:*:*
    CWE-787 - Out-of-bounds Write
    Affected products
    Product Identifier Version Remediation
    adobe_media_encoder
    adobe
    cpe:2.3:a:adobe:adobe_media_encoder:*:*:*:*:*:*:*:*
    CWE-787 - Out-of-bounds Write
    Affected products
    Product Identifier Version Remediation
    adobe_audition
    adobe
    cpe:2.3:a:adobe:adobe_audition:*:*:*:*:*:*:*:*
    audition
    adobe
    cpe:2.3:a:adobe:audition:*:*:*:*:*:*:*:*
    CWE-125 - Out-of-bounds Read
    Affected products
    Product Identifier Version Remediation
    adobe_audition
    adobe
    cpe:2.3:a:adobe:adobe_audition:*:*:*:*:*:*:*:*
    CWE-125 - Out-of-bounds Read
    Affected products
    Product Identifier Version Remediation
    adobe_media_encoder
    adobe
    cpe:2.3:a:adobe:adobe_media_encoder:*:*:*:*:*:*:*:*
    CWE-125 - Out-of-bounds Read
    Affected products
    Product Identifier Version Remediation
    adobe_media_encoder
    adobe
    cpe:2.3:a:adobe:adobe_media_encoder:*:*:*:*:*:*:*:*
    CWE-125 - Out-of-bounds Read
    Affected products
    Product Identifier Version Remediation
    adobe_media_encoder
    adobe
    cpe:2.3:a:adobe:adobe_media_encoder:*:*:*:*:*:*:*:*
    CWE-125 - Out-of-bounds Read
    Affected products
    Product Identifier Version Remediation
    adobe_media_encoder
    adobe
    cpe:2.3:a:adobe:adobe_media_encoder:*:*:*:*:*:*:*:*
    References
    URL Category
    https://helpx.adobe.com/security/products/acrobat… external
    https://helpx.adobe.com/security/products/after_e… external
    https://helpx.adobe.com/security/products/illustr… external
    https://helpx.adobe.com/security/products/premier… external
    https://helpx.adobe.com/security/products/photosh… external
    https://helpx.adobe.com/security/products/coldfus… external
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self
    https://api.ncsc.nl/velma/v1/vulnerabilities/2024… self

    {
      "document": {
        "category": "csaf_security_advisory",
        "csaf_version": "2.0",
        "distribution": {
          "tlp": {
            "label": "WHITE"
          }
        },
        "lang": "nl",
        "notes": [
          {
            "category": "legal_disclaimer",
            "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
          },
          {
            "category": "description",
            "text": "Er zijn kwetsbaarheden verholpen in Adobe producten.",
            "title": "Feiten"
          },
          {
            "category": "description",
            "text": "De kwetsbaarheden stellen een kwaadwillende in staat aanvallen uit te voeren die leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- (Remote) code execution (Gebruikersrechten)\n- Toegang tot systeemgegevens\n",
            "title": "Interpretaties"
          },
          {
            "category": "description",
            "text": "Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie. ",
            "title": "Oplossingen"
          },
          {
            "category": "general",
            "text": "medium",
            "title": "Kans"
          },
          {
            "category": "general",
            "text": "high",
            "title": "Schade"
          },
          {
            "category": "general",
            "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
            "title": "CWE-843"
          },
          {
            "category": "general",
            "text": "Use After Free",
            "title": "CWE-416"
          },
          {
            "category": "general",
            "text": "Integer Overflow or Wraparound",
            "title": "CWE-190"
          },
          {
            "category": "general",
            "text": "Out-of-bounds Write",
            "title": "CWE-787"
          },
          {
            "category": "general",
            "text": "Integer Underflow (Wrap or Wraparound)",
            "title": "CWE-191"
          },
          {
            "category": "general",
            "text": "Heap-based Buffer Overflow",
            "title": "CWE-122"
          },
          {
            "category": "general",
            "text": "Out-of-bounds Read",
            "title": "CWE-125"
          },
          {
            "category": "general",
            "text": "Improper Input Validation",
            "title": "CWE-20"
          },
          {
            "category": "general",
            "text": "Stack-based Buffer Overflow",
            "title": "CWE-121"
          },
          {
            "category": "general",
            "text": "NULL Pointer Dereference",
            "title": "CWE-476"
          },
          {
            "category": "general",
            "text": "Deserialization of Untrusted Data",
            "title": "CWE-502"
          }
        ],
        "publisher": {
          "category": "coordinator",
          "contact_details": "cert@ncsc.nl",
          "name": "Nationaal Cyber Security Centrum",
          "namespace": "https://www.ncsc.nl/"
        },
        "references": [
          {
            "category": "external",
            "summary": "Source - adobe",
            "url": "https://helpx.adobe.com/security/products/acrobat/apsb24-70.html"
          },
          {
            "category": "external",
            "summary": "Source - adobe",
            "url": "https://helpx.adobe.com/security/products/after_effects/apsb24-55.html"
          },
          {
            "category": "external",
            "summary": "Source - adobe",
            "url": "https://helpx.adobe.com/security/products/illustrator/apsb24-66.html"
          },
          {
            "category": "external",
            "summary": "Source - adobe",
            "url": "https://helpx.adobe.com/security/products/premiere_pro/apsb24-58.html"
          },
          {
            "category": "external",
            "summary": "Source - adobe",
            "url": "https://helpx.adobe.com/security/products/photoshop/apsb24-72.html"
          },
          {
            "category": "external",
            "summary": "Source - adobe",
            "url": "https://helpx.adobe.com/security/products/coldfusion/apsb24-71.html"
          }
        ],
        "title": "Kwetsbaarheden verholpen in Adobe producten",
        "tracking": {
          "current_release_date": "2024-09-11T09:31:21.515977Z",
          "id": "NCSC-2024-0368",
          "initial_release_date": "2024-09-11T09:31:21.515977Z",
          "revision_history": [
            {
              "date": "2024-09-11T09:31:21.515977Z",
              "number": "0",
              "summary": "Initiele versie"
            }
          ],
          "status": "final",
          "version": "1.0.0"
        }
      },
      "product_tree": {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "acrobat_2020",
                "product": {
                  "name": "acrobat_2020",
                  "product_id": "CSAFPID-422885",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:acrobat_2020:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "acrobat_2024",
                "product": {
                  "name": "acrobat_2024",
                  "product_id": "CSAFPID-1615953",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:acrobat_2024:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "acrobat_dc",
                "product": {
                  "name": "acrobat_dc",
                  "product_id": "CSAFPID-422884",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "acrobat_reader_2020",
                "product": {
                  "name": "acrobat_reader_2020",
                  "product_id": "CSAFPID-422886",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:acrobat_reader_2020:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "acrobat_reader_dc",
                "product": {
                  "name": "acrobat_reader_dc",
                  "product_id": "CSAFPID-371567",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "adobe_after_effects",
                "product": {
                  "name": "adobe_after_effects",
                  "product_id": "CSAFPID-691360",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:adobe_after_effects:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "adobe_premiere_pro",
                "product": {
                  "name": "adobe_premiere_pro",
                  "product_id": "CSAFPID-691359",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:adobe_premiere_pro:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "after_effects",
                "product": {
                  "name": "after_effects",
                  "product_id": "CSAFPID-297806",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-483579",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-1465370",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:0:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-906096",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:27.9.0:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-906097",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:27.9.1:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-904631",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:27.9.2:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-959492",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:27.9.3:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-1616521",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:27.9.4:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-747384",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:28.0:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-906098",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:28.1:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-906099",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:28.2:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-904630",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:28.3:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-959493",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:28.4:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator",
                "product": {
                  "name": "illustrator",
                  "product_id": "CSAFPID-1616522",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator:28.5:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator_2023",
                "product": {
                  "name": "illustrator_2023",
                  "product_id": "CSAFPID-743678",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator_2023:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "illustrator_2024",
                "product": {
                  "name": "illustrator_2024",
                  "product_id": "CSAFPID-743677",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:illustrator_2024:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "photoshop",
                "product": {
                  "name": "photoshop",
                  "product_id": "CSAFPID-326357",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "photoshop_2023",
                "product": {
                  "name": "photoshop_2023",
                  "product_id": "CSAFPID-603105",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:photoshop_2023:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "photoshop_2024",
                "product": {
                  "name": "photoshop_2024",
                  "product_id": "CSAFPID-603106",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:photoshop_2024:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "premiere_pro",
                "product": {
                  "name": "premiere_pro",
                  "product_id": "CSAFPID-488055",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:premiere_pro:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "coldfusion_2021",
                "product": {
                  "name": "coldfusion_2021",
                  "product_id": "CSAFPID-691352",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:coldfusion_2021:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "coldfusion_2023",
                "product": {
                  "name": "coldfusion_2023",
                  "product_id": "CSAFPID-691351",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:coldfusion_2023:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "adobe_audition",
                "product": {
                  "name": "adobe_audition",
                  "product_id": "CSAFPID-691358",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:adobe_audition:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "audition",
                "product": {
                  "name": "audition",
                  "product_id": "CSAFPID-669754",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:audition:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "adobe_media_encoder",
                "product": {
                  "name": "adobe_media_encoder",
                  "product_id": "CSAFPID-691357",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:adobe:adobe_media_encoder:*:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "vendor",
            "name": "adobe"
          }
        ]
      },
      "vulnerabilities": [
        {
          "cve": "CVE-2024-34121",
          "cwe": {
            "id": "CWE-190",
            "name": "Integer Overflow or Wraparound"
          },
          "notes": [
            {
              "category": "other",
              "text": "Integer Overflow or Wraparound",
              "title": "CWE-190"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-743677",
              "CSAFPID-743678"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-34121",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34121.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-743677",
                "CSAFPID-743678"
              ]
            }
          ],
          "title": "CVE-2024-34121"
        },
        {
          "cve": "CVE-2024-39381",
          "cwe": {
            "id": "CWE-787",
            "name": "Out-of-bounds Write"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Write",
              "title": "CWE-787"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691360",
              "CSAFPID-297806"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-39381",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39381.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691360",
                "CSAFPID-297806"
              ]
            }
          ],
          "title": "CVE-2024-39381"
        },
        {
          "cve": "CVE-2024-39384",
          "cwe": {
            "id": "CWE-787",
            "name": "Out-of-bounds Write"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Write",
              "title": "CWE-787"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691359",
              "CSAFPID-488055"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-39384",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39384.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691359",
                "CSAFPID-488055"
              ]
            }
          ],
          "title": "CVE-2024-39384"
        },
        {
          "cve": "CVE-2024-41857",
          "cwe": {
            "id": "CWE-191",
            "name": "Integer Underflow (Wrap or Wraparound)"
          },
          "notes": [
            {
              "category": "other",
              "text": "Integer Underflow (Wrap or Wraparound)",
              "title": "CWE-191"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-743677",
              "CSAFPID-743678"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41857",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41857.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-743677",
                "CSAFPID-743678"
              ]
            }
          ],
          "title": "CVE-2024-41857"
        },
        {
          "cve": "CVE-2024-41859",
          "cwe": {
            "id": "CWE-787",
            "name": "Out-of-bounds Write"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Write",
              "title": "CWE-787"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691360"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41859",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41859.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691360"
              ]
            }
          ],
          "title": "CVE-2024-41859"
        },
        {
          "cve": "CVE-2024-41869",
          "cwe": {
            "id": "CWE-416",
            "name": "Use After Free"
          },
          "notes": [
            {
              "category": "other",
              "text": "Use After Free",
              "title": "CWE-416"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-422884",
              "CSAFPID-371567",
              "CSAFPID-1615953",
              "CSAFPID-422885",
              "CSAFPID-422886"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41869",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41869.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-422884",
                "CSAFPID-371567",
                "CSAFPID-1615953",
                "CSAFPID-422885",
                "CSAFPID-422886"
              ]
            }
          ],
          "title": "CVE-2024-41869"
        },
        {
          "cve": "CVE-2024-43756",
          "cwe": {
            "id": "CWE-122",
            "name": "Heap-based Buffer Overflow"
          },
          "notes": [
            {
              "category": "other",
              "text": "Heap-based Buffer Overflow",
              "title": "CWE-122"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-603105",
              "CSAFPID-603106"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-43756",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43756.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-603105",
                "CSAFPID-603106"
              ]
            }
          ],
          "title": "CVE-2024-43756"
        },
        {
          "cve": "CVE-2024-43758",
          "cwe": {
            "id": "CWE-416",
            "name": "Use After Free"
          },
          "notes": [
            {
              "category": "other",
              "text": "Use After Free",
              "title": "CWE-416"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-743677",
              "CSAFPID-743678"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-43758",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43758.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-743677",
                "CSAFPID-743678"
              ]
            }
          ],
          "title": "CVE-2024-43758"
        },
        {
          "cve": "CVE-2024-43760",
          "cwe": {
            "id": "CWE-787",
            "name": "Out-of-bounds Write"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Write",
              "title": "CWE-787"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-603105",
              "CSAFPID-603106",
              "CSAFPID-326357"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-43760",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43760.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-603105",
                "CSAFPID-603106",
                "CSAFPID-326357"
              ]
            }
          ],
          "title": "CVE-2024-43760"
        },
        {
          "cve": "CVE-2024-45108",
          "cwe": {
            "id": "CWE-787",
            "name": "Out-of-bounds Write"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Write",
              "title": "CWE-787"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-603105",
              "CSAFPID-603106"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-45108",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45108.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-603105",
                "CSAFPID-603106"
              ]
            }
          ],
          "title": "CVE-2024-45108"
        },
        {
          "cve": "CVE-2024-45109",
          "cwe": {
            "id": "CWE-787",
            "name": "Out-of-bounds Write"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Write",
              "title": "CWE-787"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-603105",
              "CSAFPID-603106"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-45109",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45109.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-603105",
                "CSAFPID-603106"
              ]
            }
          ],
          "title": "CVE-2024-45109"
        },
        {
          "cve": "CVE-2024-45112",
          "cwe": {
            "id": "CWE-843",
            "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
          },
          "notes": [
            {
              "category": "other",
              "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
              "title": "CWE-843"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-422884",
              "CSAFPID-371567",
              "CSAFPID-1615953",
              "CSAFPID-422885",
              "CSAFPID-422886"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-45112",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45112.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 8.6,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-422884",
                "CSAFPID-371567",
                "CSAFPID-1615953",
                "CSAFPID-422885",
                "CSAFPID-422886"
              ]
            }
          ],
          "title": "CVE-2024-45112"
        },
        {
          "cve": "CVE-2024-39380",
          "cwe": {
            "id": "CWE-122",
            "name": "Heap-based Buffer Overflow"
          },
          "notes": [
            {
              "category": "other",
              "text": "Heap-based Buffer Overflow",
              "title": "CWE-122"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691360"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-39380",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39380.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691360"
              ]
            }
          ],
          "title": "CVE-2024-39380"
        },
        {
          "cve": "CVE-2024-39382",
          "cwe": {
            "id": "CWE-125",
            "name": "Out-of-bounds Read"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Read",
              "title": "CWE-125"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691360",
              "CSAFPID-297806"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-39382",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39382.json"
            }
          ],
          "title": "CVE-2024-39382"
        },
        {
          "cve": "CVE-2024-39385",
          "cwe": {
            "id": "CWE-416",
            "name": "Use After Free"
          },
          "notes": [
            {
              "category": "other",
              "text": "Use After Free",
              "title": "CWE-416"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691359",
              "CSAFPID-488055"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-39385",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39385.json"
            }
          ],
          "title": "CVE-2024-39385"
        },
        {
          "cve": "CVE-2024-41856",
          "cwe": {
            "id": "CWE-20",
            "name": "Improper Input Validation"
          },
          "notes": [
            {
              "category": "other",
              "text": "Improper Input Validation",
              "title": "CWE-20"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-904631",
              "CSAFPID-959492",
              "CSAFPID-1616521",
              "CSAFPID-747384",
              "CSAFPID-1465370",
              "CSAFPID-483579",
              "CSAFPID-743677",
              "CSAFPID-743678"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41856",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41856.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-904631",
                "CSAFPID-959492",
                "CSAFPID-1616521",
                "CSAFPID-747384",
                "CSAFPID-1465370",
                "CSAFPID-483579",
                "CSAFPID-743677",
                "CSAFPID-743678"
              ]
            }
          ],
          "title": "CVE-2024-41856"
        },
        {
          "cve": "CVE-2024-41867",
          "cwe": {
            "id": "CWE-121",
            "name": "Stack-based Buffer Overflow"
          },
          "notes": [
            {
              "category": "other",
              "text": "Stack-based Buffer Overflow",
              "title": "CWE-121"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691360"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41867",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41867.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691360"
              ]
            }
          ],
          "title": "CVE-2024-41867"
        },
        {
          "cve": "CVE-2024-43759",
          "cwe": {
            "id": "CWE-476",
            "name": "NULL Pointer Dereference"
          },
          "notes": [
            {
              "category": "other",
              "text": "NULL Pointer Dereference",
              "title": "CWE-476"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-743677",
              "CSAFPID-743678"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-43759",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43759.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 3.3,
                "baseSeverity": "LOW",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-743677",
                "CSAFPID-743678"
              ]
            }
          ],
          "title": "CVE-2024-43759"
        },
        {
          "cve": "CVE-2024-45110",
          "cwe": {
            "id": "CWE-125",
            "name": "Out-of-bounds Read"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Read",
              "title": "CWE-125"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-603105",
              "CSAFPID-603106"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-45110",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45110.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-603105",
                "CSAFPID-603106"
              ]
            }
          ],
          "title": "CVE-2024-45110"
        },
        {
          "cve": "CVE-2024-45111",
          "cwe": {
            "id": "CWE-125",
            "name": "Out-of-bounds Read"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Read",
              "title": "CWE-125"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-743677",
              "CSAFPID-743678"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-45111",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45111.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-743677",
                "CSAFPID-743678"
              ]
            }
          ],
          "title": "CVE-2024-45111"
        },
        {
          "cve": "CVE-2024-41874",
          "cwe": {
            "id": "CWE-502",
            "name": "Deserialization of Untrusted Data"
          },
          "notes": [
            {
              "category": "other",
              "text": "Deserialization of Untrusted Data",
              "title": "CWE-502"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691351",
              "CSAFPID-691352"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41874",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41874.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691351",
                "CSAFPID-691352"
              ]
            }
          ],
          "title": "CVE-2024-41874"
        },
        {
          "cve": "CVE-2024-39377",
          "cwe": {
            "id": "CWE-787",
            "name": "Out-of-bounds Write"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Write",
              "title": "CWE-787"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691357"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-39377",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39377.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691357"
              ]
            }
          ],
          "title": "CVE-2024-39377"
        },
        {
          "cve": "CVE-2024-39378",
          "cwe": {
            "id": "CWE-787",
            "name": "Out-of-bounds Write"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Write",
              "title": "CWE-787"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691358",
              "CSAFPID-669754"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-39378",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-39378.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691358",
                "CSAFPID-669754"
              ]
            }
          ],
          "title": "CVE-2024-39378"
        },
        {
          "cve": "CVE-2024-41868",
          "cwe": {
            "id": "CWE-125",
            "name": "Out-of-bounds Read"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Read",
              "title": "CWE-125"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691358"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41868",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41868.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691358"
              ]
            }
          ],
          "title": "CVE-2024-41868"
        },
        {
          "cve": "CVE-2024-41870",
          "cwe": {
            "id": "CWE-125",
            "name": "Out-of-bounds Read"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Read",
              "title": "CWE-125"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691357"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41870",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41870.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691357"
              ]
            }
          ],
          "title": "CVE-2024-41870"
        },
        {
          "cve": "CVE-2024-41871",
          "cwe": {
            "id": "CWE-125",
            "name": "Out-of-bounds Read"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Read",
              "title": "CWE-125"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691357"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41871",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41871.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691357"
              ]
            }
          ],
          "title": "CVE-2024-41871"
        },
        {
          "cve": "CVE-2024-41872",
          "cwe": {
            "id": "CWE-125",
            "name": "Out-of-bounds Read"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Read",
              "title": "CWE-125"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691357"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41872",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41872.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691357"
              ]
            }
          ],
          "title": "CVE-2024-41872"
        },
        {
          "cve": "CVE-2024-41873",
          "cwe": {
            "id": "CWE-125",
            "name": "Out-of-bounds Read"
          },
          "notes": [
            {
              "category": "other",
              "text": "Out-of-bounds Read",
              "title": "CWE-125"
            }
          ],
          "product_status": {
            "known_affected": [
              "CSAFPID-691357"
            ]
          },
          "references": [
            {
              "category": "self",
              "summary": "CVE-2024-41873",
              "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41873.json"
            }
          ],
          "scores": [
            {
              "cvss_v3": {
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "products": [
                "CSAFPID-691357"
              ]
            }
          ],
          "title": "CVE-2024-41873"
        }
      ]
    }

    WID-SEC-W-2024-2118

    Vulnerability from csaf_certbund - Published: 2024-09-10 22:00 - Updated: 2024-12-01 23:00
    Summary
    Adobe Photoshop: Mehrere Schwachstellen
    Severity
    Mittel
    Notes
    Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
    Produktbeschreibung: Photoshop ist eine Bildbearbeitungssoftware von Adobe.
    Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Photoshop ausnutzen, um beliebigen Programmcode auszuführen oder vertrauliche Informationen offenzulegen.
    Betroffene Betriebssysteme: - MacOS X - Windows

    In Adobe Photoshop bestehen mehrere Schwachstellen. Diese Fehler existieren wegen eines Heap-basierten Pufferüberlaufs und mehrerer Out-of-Bound-Schreib- und Leseprobleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

    Affected products
    Product Identifier Version Remediation
    Adobe Photoshop 2023 <24.7.5
    Adobe / Photoshop
    2023 <24.7.5
    Adobe Photoshop 2024 <25.12
    Adobe / Photoshop
    2024 <25.12

    In Adobe Photoshop bestehen mehrere Schwachstellen. Diese Fehler existieren wegen eines Heap-basierten Pufferüberlaufs und mehrerer Out-of-Bound-Schreib- und Leseprobleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

    Affected products
    Product Identifier Version Remediation
    Adobe Photoshop 2023 <24.7.5
    Adobe / Photoshop
    2023 <24.7.5
    Adobe Photoshop 2024 <25.12
    Adobe / Photoshop
    2024 <25.12

    In Adobe Photoshop bestehen mehrere Schwachstellen. Diese Fehler existieren wegen eines Heap-basierten Pufferüberlaufs und mehrerer Out-of-Bound-Schreib- und Leseprobleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

    Affected products
    Product Identifier Version Remediation
    Adobe Photoshop 2023 <24.7.5
    Adobe / Photoshop
    2023 <24.7.5
    Adobe Photoshop 2024 <25.12
    Adobe / Photoshop
    2024 <25.12

    In Adobe Photoshop bestehen mehrere Schwachstellen. Diese Fehler existieren wegen eines Heap-basierten Pufferüberlaufs und mehrerer Out-of-Bound-Schreib- und Leseprobleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

    Affected products
    Product Identifier Version Remediation
    Adobe Photoshop 2023 <24.7.5
    Adobe / Photoshop
    2023 <24.7.5
    Adobe Photoshop 2024 <25.12
    Adobe / Photoshop
    2024 <25.12

    In Adobe Photoshop bestehen mehrere Schwachstellen. Diese Fehler existieren wegen eines Heap-basierten Pufferüberlaufs und mehrerer Out-of-Bound-Schreib- und Leseprobleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

    Affected products
    Product Identifier Version Remediation
    Adobe Photoshop 2023 <24.7.5
    Adobe / Photoshop
    2023 <24.7.5
    Adobe Photoshop 2024 <25.12
    Adobe / Photoshop
    2024 <25.12

    {
      "document": {
        "aggregate_severity": {
          "text": "mittel"
        },
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
          "tlp": {
            "label": "WHITE",
            "url": "https://www.first.org/tlp/"
          }
        },
        "lang": "de-DE",
        "notes": [
          {
            "category": "legal_disclaimer",
            "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
          },
          {
            "category": "description",
            "text": "Photoshop ist eine Bildbearbeitungssoftware von Adobe.",
            "title": "Produktbeschreibung"
          },
          {
            "category": "summary",
            "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Photoshop ausnutzen, um beliebigen Programmcode auszuf\u00fchren oder vertrauliche Informationen offenzulegen.",
            "title": "Angriff"
          },
          {
            "category": "general",
            "text": "- MacOS X\n- Windows",
            "title": "Betroffene Betriebssysteme"
          }
        ],
        "publisher": {
          "category": "other",
          "contact_details": "csaf-provider@cert-bund.de",
          "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
          "namespace": "https://www.bsi.bund.de"
        },
        "references": [
          {
            "category": "self",
            "summary": "WID-SEC-W-2024-2118 - CSAF Version",
            "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2118.json"
          },
          {
            "category": "self",
            "summary": "WID-SEC-2024-2118 - Portal Version",
            "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2118"
          },
          {
            "category": "external",
            "summary": "Adobe Security Bulletin APSB24-72 vom 2024-09-10",
            "url": "https://helpx.adobe.com/security/products/photoshop/apsb24-72.html"
          }
        ],
        "source_lang": "en-US",
        "title": "Adobe Photoshop: Mehrere Schwachstellen",
        "tracking": {
          "current_release_date": "2024-12-01T23:00:00.000+00:00",
          "generator": {
            "date": "2024-12-02T11:33:58.406+00:00",
            "engine": {
              "name": "BSI-WID",
              "version": "1.3.8"
            }
          },
          "id": "WID-SEC-W-2024-2118",
          "initial_release_date": "2024-09-10T22:00:00.000+00:00",
          "revision_history": [
            {
              "date": "2024-09-10T22:00:00.000+00:00",
              "number": "1",
              "summary": "Initiale Fassung"
            },
            {
              "date": "2024-12-01T23:00:00.000+00:00",
              "number": "2",
              "summary": "Pr\u00fcfung Produkteintragung"
            }
          ],
          "status": "final",
          "version": "2"
        }
      },
      "product_tree": {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "2023 \u003c24.7.5",
                    "product": {
                      "name": "Adobe Photoshop 2023 \u003c24.7.5",
                      "product_id": "T037505"
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "2023 24.7.5",
                    "product": {
                      "name": "Adobe Photoshop 2023 24.7.5",
                      "product_id": "T037505-fixed",
                      "product_identification_helper": {
                        "cpe": "cpe:/a:adobe:photoshop:2023__24.7.5"
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "2024 \u003c25.12",
                    "product": {
                      "name": "Adobe Photoshop 2024 \u003c25.12",
                      "product_id": "T037506"
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "2024 25.12",
                    "product": {
                      "name": "Adobe Photoshop 2024 25.12",
                      "product_id": "T037506-fixed",
                      "product_identification_helper": {
                        "cpe": "cpe:/a:adobe:photoshop:2024__25.12"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Photoshop"
              }
            ],
            "category": "vendor",
            "name": "Adobe"
          }
        ]
      },
      "vulnerabilities": [
        {
          "cve": "CVE-2024-43756",
          "notes": [
            {
              "category": "description",
              "text": "In Adobe Photoshop bestehen mehrere Schwachstellen. Diese Fehler existieren wegen eines Heap-basierten Puffer\u00fcberlaufs und mehrerer Out-of-Bound-Schreib- und Leseprobleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
            }
          ],
          "product_status": {
            "known_affected": [
              "T037505",
              "T037506"
            ]
          },
          "release_date": "2024-09-10T22:00:00.000+00:00",
          "title": "CVE-2024-43756"
        },
        {
          "cve": "CVE-2024-43760",
          "notes": [
            {
              "category": "description",
              "text": "In Adobe Photoshop bestehen mehrere Schwachstellen. Diese Fehler existieren wegen eines Heap-basierten Puffer\u00fcberlaufs und mehrerer Out-of-Bound-Schreib- und Leseprobleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
            }
          ],
          "product_status": {
            "known_affected": [
              "T037505",
              "T037506"
            ]
          },
          "release_date": "2024-09-10T22:00:00.000+00:00",
          "title": "CVE-2024-43760"
        },
        {
          "cve": "CVE-2024-45108",
          "notes": [
            {
              "category": "description",
              "text": "In Adobe Photoshop bestehen mehrere Schwachstellen. Diese Fehler existieren wegen eines Heap-basierten Puffer\u00fcberlaufs und mehrerer Out-of-Bound-Schreib- und Leseprobleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
            }
          ],
          "product_status": {
            "known_affected": [
              "T037505",
              "T037506"
            ]
          },
          "release_date": "2024-09-10T22:00:00.000+00:00",
          "title": "CVE-2024-45108"
        },
        {
          "cve": "CVE-2024-45109",
          "notes": [
            {
              "category": "description",
              "text": "In Adobe Photoshop bestehen mehrere Schwachstellen. Diese Fehler existieren wegen eines Heap-basierten Puffer\u00fcberlaufs und mehrerer Out-of-Bound-Schreib- und Leseprobleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
            }
          ],
          "product_status": {
            "known_affected": [
              "T037505",
              "T037506"
            ]
          },
          "release_date": "2024-09-10T22:00:00.000+00:00",
          "title": "CVE-2024-45109"
        },
        {
          "cve": "CVE-2024-45110",
          "notes": [
            {
              "category": "description",
              "text": "In Adobe Photoshop bestehen mehrere Schwachstellen. Diese Fehler existieren wegen eines Heap-basierten Puffer\u00fcberlaufs und mehrerer Out-of-Bound-Schreib- und Leseprobleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren oder vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
            }
          ],
          "product_status": {
            "known_affected": [
              "T037505",
              "T037506"
            ]
          },
          "release_date": "2024-09-10T22:00:00.000+00:00",
          "title": "CVE-2024-45110"
        }
      ]
    }