WID-SEC-W-2024-3677
Vulnerability from csaf_certbund - Published: 2024-12-10 23:00 - Updated: 2024-12-10 23:00Summary
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.
Angriff: Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu erzeugen.
Betroffene Betriebssysteme: - Sonstiges
- UNIX
- Windows
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud Substance 3D Sampler <4.5.2
Adobe / Creative Cloud
|
Substance 3D Sampler <4.5.2 |
Affected products
Known affected
1 product, the same list as for
CVE-2024-52994
Affected products
Known affected
1 product, the same list as for
CVE-2024-52994
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud Media Encoder <25.1
Adobe / Creative Cloud
|
Media Encoder <25.1 | ||
|
Adobe Creative Cloud Media Encoder <24.6.4
Adobe / Creative Cloud
|
Media Encoder <24.6.4 |
Affected products
Known affected
2 products, the same list as for
CVE-2024-49551
Affected products
Known affected
2 products, the same list as for
CVE-2024-49551
Affected products
Known affected
2 products, the same list as for
CVE-2024-49551
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud Illustrator 2025 <29.1
Adobe / Creative Cloud
|
Illustrator 2025 <29.1 | ||
|
Adobe Creative Cloud Illustrator 2024 <28.7.3
Adobe / Creative Cloud
|
Illustrator 2024 <28.7.3 |
Affected products
Known affected
2 products, the same list as for
CVE-2024-49538
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud After Effects <24.6.3
Adobe / Creative Cloud
|
After Effects <24.6.3 | ||
|
Adobe Creative Cloud After Effects <25.1
Adobe / Creative Cloud
|
After Effects <25.1 |
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud Animate 2024 <24.0.6
Adobe / Creative Cloud
|
Animate 2024 <24.0.6 | ||
|
Adobe Creative Cloud Animate 2023 <23.0.9
Adobe / Creative Cloud
|
Animate 2023 <23.0.9 |
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products, the same list as for
CVE-2024-45155
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud InDesign <ID19.5.1
Adobe / Creative Cloud
|
InDesign <ID19.5.1 | ||
|
Adobe Creative Cloud InDesign <ID20.0
Adobe / Creative Cloud
|
InDesign <ID20.0 |
Affected products
Known affected
2 products, the same list as for
CVE-2024-49543
Affected products
Known affected
2 products, the same list as for
CVE-2024-49543
Affected products
Known affected
2 products, the same list as for
CVE-2024-49543
Affected products
Known affected
2 products, the same list as for
CVE-2024-49543
Affected products
Known affected
2 products, the same list as for
CVE-2024-49543
Affected products
Known affected
2 products, the same list as for
CVE-2024-49543
Affected products
Known affected
2 products, the same list as for
CVE-2024-49543
Affected products
Known affected
2 products, the same list as for
CVE-2024-49543
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud PDFL Software Development Kit (SDK) <21.0.0.7
Adobe / Creative Cloud
|
PDFL Software Development Kit (SDK) <21.0.0.7 |
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud Connect <12.7
Adobe / Creative Cloud
|
Connect <12.7 | ||
|
Adobe Creative Cloud Connect <11.4.9
Adobe / Creative Cloud
|
Connect <11.4.9 |
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
2 products, the same list as for
CVE-2024-49550
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud Substance 3D Modeler <1.15.0
Adobe / Creative Cloud
|
Substance 3D Modeler <1.15.0 |
Affected products
Known affected
1 product, the same list as for
CVE-2024-52833
Affected products
Known affected
1 product, the same list as for
CVE-2024-52833
Affected products
Known affected
1 product, the same list as for
CVE-2024-52833
Affected products
Known affected
1 product, the same list as for
CVE-2024-52833
Affected products
Known affected
1 product, the same list as for
CVE-2024-52833
Affected products
Known affected
1 product, the same list as for
CVE-2024-52833
Affected products
Known affected
1 product, the same list as for
CVE-2024-52833
Affected products
Known affected
1 product, the same list as for
CVE-2024-52833
Affected products
Known affected
1 product, the same list as for
CVE-2024-52833
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud Bridge <15.0.1
Adobe / Creative Cloud
|
Bridge <15.0.1 | ||
|
Adobe Creative Cloud Bridge <14.1.4
Adobe / Creative Cloud
|
Bridge <14.1.4 |
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud Premiere Pro <24.6.4
Adobe / Creative Cloud
|
Premiere Pro <24.6.4 | ||
|
Adobe Creative Cloud Premiere Pro <25.1
Adobe / Creative Cloud
|
Premiere Pro <25.1 |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Creative Cloud Substance 3D Painter <10.1.2
Adobe / Creative Cloud
|
Substance 3D Painter <10.1.2 |
Affected products
Known affected
1 product, the same list as for
CVE-2024-53957
References
14 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Adobe Creative Cloud umfasst Anwendungen und Dienste f\u00fcr Video, Design, Fotografie und Web.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, erh\u00f6hte Rechte zu erlangen, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu erzeugen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-3677 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3677.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-3677 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3677"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-93 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/media-encoder/apsb24-93.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-94 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/illustrator/apsb24-94.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-95 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/after_effects/apsb24-95.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-96 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/animate/apsb24-96.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-97 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/indesign/apsb24-97.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-98 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/pdfl-sdk1/apsb24-98.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-99 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/connect/apsb24-99.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-100 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/substance3d-sampler/apsb24-100.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-102 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/substance3d-modeler/apsb24-102.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-103 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/bridge/apsb24-103.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-104 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/premiere_pro/apsb24-104.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB24-105 vom 2024-12-10",
"url": "https://helpx.adobe.com/security/products/substance3d_painter/apsb24-105.html"
}
],
"source_lang": "en-US",
"title": "Adobe Creative Cloud Applikationen: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-12-10T23:00:00.000+00:00",
"generator": {
"date": "2026-07-16T17:13:40.966+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2024-3677",
"initial_release_date": "2024-12-10T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-12-10T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "Media Encoder \u003c24.6.4",
"product": {
"name": "Adobe Creative Cloud Media Encoder \u003c24.6.4",
"product_id": "T039758"
}
},
{
"category": "product_version",
"name": "Media Encoder 24.6.4",
"product": {
"name": "Adobe Creative Cloud Media Encoder 24.6.4",
"product_id": "T039758-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:media_encoder__24.6.4"
}
}
},
{
"category": "product_version_range",
"name": "Media Encoder \u003c25.1",
"product": {
"name": "Adobe Creative Cloud Media Encoder \u003c25.1",
"product_id": "T039759"
}
},
{
"category": "product_version",
"name": "Media Encoder 25.1",
"product": {
"name": "Adobe Creative Cloud Media Encoder 25.1",
"product_id": "T039759-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:media_encoder__25.1"
}
}
},
{
"category": "product_version_range",
"name": "Illustrator 2025 \u003c29.1",
"product": {
"name": "Adobe Creative Cloud Illustrator 2025 \u003c29.1",
"product_id": "T039760"
}
},
{
"category": "product_version",
"name": "Illustrator 2025 29.1",
"product": {
"name": "Adobe Creative Cloud Illustrator 2025 29.1",
"product_id": "T039760-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:illustrator_2025__29.1"
}
}
},
{
"category": "product_version_range",
"name": "Illustrator 2024 \u003c28.7.3",
"product": {
"name": "Adobe Creative Cloud Illustrator 2024 \u003c28.7.3",
"product_id": "T039761"
}
},
{
"category": "product_version",
"name": "Illustrator 2024 28.7.3",
"product": {
"name": "Adobe Creative Cloud Illustrator 2024 28.7.3",
"product_id": "T039761-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:illustrator_2024__28.7.3"
}
}
},
{
"category": "product_version_range",
"name": "After Effects \u003c24.6.3",
"product": {
"name": "Adobe Creative Cloud After Effects \u003c24.6.3",
"product_id": "T039766"
}
},
{
"category": "product_version_range",
"name": "After Effects 24.6.3",
"product": {
"name": "Adobe Creative Cloud After Effects 24.6.3",
"product_id": "T039766-fixed"
}
},
{
"category": "product_version_range",
"name": "After Effects \u003c25.1",
"product": {
"name": "Adobe Creative Cloud After Effects \u003c25.1",
"product_id": "T039767"
}
},
{
"category": "product_version_range",
"name": "After Effects 25.1",
"product": {
"name": "Adobe Creative Cloud After Effects 25.1",
"product_id": "T039767-fixed"
}
},
{
"category": "product_version_range",
"name": "Animate\u202f 2023 \u003c23.0.9",
"product": {
"name": "Adobe Creative Cloud Animate\u202f 2023 \u003c23.0.9",
"product_id": "T039768"
}
},
{
"category": "product_version",
"name": "Animate\u202f 2023 23.0.9",
"product": {
"name": "Adobe Creative Cloud Animate\u202f 2023 23.0.9",
"product_id": "T039768-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:animate_2023__23.0.9"
}
}
},
{
"category": "product_version_range",
"name": "Animate\u202f 2024 \u003c24.0.6",
"product": {
"name": "Adobe Creative Cloud Animate\u202f 2024 \u003c24.0.6",
"product_id": "T039769"
}
},
{
"category": "product_version",
"name": "Animate\u202f 2024 24.0.6",
"product": {
"name": "Adobe Creative Cloud Animate\u202f 2024 24.0.6",
"product_id": "T039769-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:animate_2024__24.0.6"
}
}
},
{
"category": "product_version_range",
"name": "InDesign \u003cID20.0",
"product": {
"name": "Adobe Creative Cloud InDesign \u003cID20.0",
"product_id": "T039770"
}
},
{
"category": "product_version",
"name": "InDesign ID20.0",
"product": {
"name": "Adobe Creative Cloud InDesign ID20.0",
"product_id": "T039770-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:indesign__id20.0"
}
}
},
{
"category": "product_version_range",
"name": "InDesign \u003cID19.5.1",
"product": {
"name": "Adobe Creative Cloud InDesign \u003cID19.5.1",
"product_id": "T039771"
}
},
{
"category": "product_version",
"name": "InDesign ID19.5.1",
"product": {
"name": "Adobe Creative Cloud InDesign ID19.5.1",
"product_id": "T039771-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:indesign__id19.5.1"
}
}
},
{
"category": "product_version_range",
"name": "PDFL Software Development Kit (SDK) \u003c21.0.0.7",
"product": {
"name": "Adobe Creative Cloud PDFL Software Development Kit (SDK) \u003c21.0.0.7",
"product_id": "T039772"
}
},
{
"category": "product_version",
"name": "PDFL Software Development Kit (SDK) 21.0.0.7",
"product": {
"name": "Adobe Creative Cloud PDFL Software Development Kit (SDK) 21.0.0.7",
"product_id": "T039772-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:pdfl_software_development_kit_%2528sdk%2529__21.0.0.7"
}
}
},
{
"category": "product_version_range",
"name": "Connect \u003c12.7",
"product": {
"name": "Adobe Creative Cloud Connect \u003c12.7",
"product_id": "T039773"
}
},
{
"category": "product_version",
"name": "Connect 12.7",
"product": {
"name": "Adobe Creative Cloud Connect 12.7",
"product_id": "T039773-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:connect__12.7"
}
}
},
{
"category": "product_version_range",
"name": "Connect \u003c11.4.9",
"product": {
"name": "Adobe Creative Cloud Connect \u003c11.4.9",
"product_id": "T039774"
}
},
{
"category": "product_version",
"name": "Connect 11.4.9",
"product": {
"name": "Adobe Creative Cloud Connect 11.4.9",
"product_id": "T039774-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:connect__11.4.9"
}
}
},
{
"category": "product_version_range",
"name": "Substance 3D Sampler \u003c4.5.2",
"product": {
"name": "Adobe Creative Cloud Substance 3D Sampler \u003c4.5.2",
"product_id": "T039775"
}
},
{
"category": "product_version",
"name": "Substance 3D Sampler 4.5.2",
"product": {
"name": "Adobe Creative Cloud Substance 3D Sampler 4.5.2",
"product_id": "T039775-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:substance_3d_sampler__4.5.2"
}
}
},
{
"category": "product_version_range",
"name": "Substance 3D Modeler \u003c1.15.0",
"product": {
"name": "Adobe Creative Cloud Substance 3D Modeler \u003c1.15.0",
"product_id": "T039785"
}
},
{
"category": "product_version",
"name": "Substance 3D Modeler 1.15.0",
"product": {
"name": "Adobe Creative Cloud Substance 3D Modeler 1.15.0",
"product_id": "T039785-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:substance_3d_modeler__1.15.0"
}
}
},
{
"category": "product_version_range",
"name": "Bridge \u003c14.1.4",
"product": {
"name": "Adobe Creative Cloud Bridge \u003c14.1.4",
"product_id": "T039786"
}
},
{
"category": "product_version",
"name": "Bridge 14.1.4",
"product": {
"name": "Adobe Creative Cloud Bridge 14.1.4",
"product_id": "T039786-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:bridge__14.1.4"
}
}
},
{
"category": "product_version_range",
"name": "Bridge \u003c15.0.1",
"product": {
"name": "Adobe Creative Cloud Bridge \u003c15.0.1",
"product_id": "T039787"
}
},
{
"category": "product_version",
"name": "Bridge 15.0.1",
"product": {
"name": "Adobe Creative Cloud Bridge 15.0.1",
"product_id": "T039787-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:bridge__15.0.1"
}
}
},
{
"category": "product_version_range",
"name": "Premiere Pro \u003c25.1",
"product": {
"name": "Adobe Creative Cloud Premiere Pro \u003c25.1",
"product_id": "T039790"
}
},
{
"category": "product_version",
"name": "Premiere Pro 25.1",
"product": {
"name": "Adobe Creative Cloud Premiere Pro 25.1",
"product_id": "T039790-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:premiere_pro__25.1"
}
}
},
{
"category": "product_version_range",
"name": "Premiere Pro \u003c24.6.4",
"product": {
"name": "Adobe Creative Cloud Premiere Pro \u003c24.6.4",
"product_id": "T039791"
}
},
{
"category": "product_version",
"name": "Premiere Pro 24.6.4",
"product": {
"name": "Adobe Creative Cloud Premiere Pro 24.6.4",
"product_id": "T039791-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:premiere_pro__24.6.4"
}
}
},
{
"category": "product_version_range",
"name": "Substance 3D Painter \u003c10.1.2",
"product": {
"name": "Adobe Creative Cloud Substance 3D Painter \u003c10.1.2",
"product_id": "T039793"
}
},
{
"category": "product_version",
"name": "Substance 3D Painter 10.1.2",
"product": {
"name": "Adobe Creative Cloud Substance 3D Painter 10.1.2",
"product_id": "T039793-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:substance_3d_painter__10.1.2"
}
}
}
],
"category": "product_name",
"name": "Creative Cloud"
}
],
"category": "vendor",
"name": "Adobe"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-52994",
"product_status": {
"known_affected": [
"T039775"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52994"
},
{
"cve": "CVE-2024-52995",
"product_status": {
"known_affected": [
"T039775"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52995"
},
{
"cve": "CVE-2024-52996",
"product_status": {
"known_affected": [
"T039775"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52996"
},
{
"cve": "CVE-2024-49551",
"product_status": {
"known_affected": [
"T039759",
"T039758"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49551"
},
{
"cve": "CVE-2024-49552",
"product_status": {
"known_affected": [
"T039759",
"T039758"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49552"
},
{
"cve": "CVE-2024-49553",
"product_status": {
"known_affected": [
"T039759",
"T039758"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49553"
},
{
"cve": "CVE-2024-49554",
"product_status": {
"known_affected": [
"T039759",
"T039758"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49554"
},
{
"cve": "CVE-2024-49538",
"product_status": {
"known_affected": [
"T039760",
"T039761"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49538"
},
{
"cve": "CVE-2024-49541",
"product_status": {
"known_affected": [
"T039760",
"T039761"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49541"
},
{
"cve": "CVE-2024-49537",
"product_status": {
"known_affected": [
"T039766",
"T039767"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49537"
},
{
"cve": "CVE-2024-45155",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-45155"
},
{
"cve": "CVE-2024-45156",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-45156"
},
{
"cve": "CVE-2024-52982",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52982"
},
{
"cve": "CVE-2024-52983",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52983"
},
{
"cve": "CVE-2024-52984",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52984"
},
{
"cve": "CVE-2024-52985",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52985"
},
{
"cve": "CVE-2024-52986",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52986"
},
{
"cve": "CVE-2024-52987",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52987"
},
{
"cve": "CVE-2024-52988",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52988"
},
{
"cve": "CVE-2024-52989",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52989"
},
{
"cve": "CVE-2024-52990",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52990"
},
{
"cve": "CVE-2024-53953",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53953"
},
{
"cve": "CVE-2024-53954",
"product_status": {
"known_affected": [
"T039769",
"T039768"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53954"
},
{
"cve": "CVE-2024-49543",
"product_status": {
"known_affected": [
"T039771",
"T039770"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49543"
},
{
"cve": "CVE-2024-49544",
"product_status": {
"known_affected": [
"T039771",
"T039770"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49544"
},
{
"cve": "CVE-2024-49545",
"product_status": {
"known_affected": [
"T039771",
"T039770"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49545"
},
{
"cve": "CVE-2024-49546",
"product_status": {
"known_affected": [
"T039771",
"T039770"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49546"
},
{
"cve": "CVE-2024-49547",
"product_status": {
"known_affected": [
"T039771",
"T039770"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49547"
},
{
"cve": "CVE-2024-49548",
"product_status": {
"known_affected": [
"T039771",
"T039770"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49548"
},
{
"cve": "CVE-2024-49549",
"product_status": {
"known_affected": [
"T039771",
"T039770"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49549"
},
{
"cve": "CVE-2024-53951",
"product_status": {
"known_affected": [
"T039771",
"T039770"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53951"
},
{
"cve": "CVE-2024-53952",
"product_status": {
"known_affected": [
"T039771",
"T039770"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53952"
},
{
"cve": "CVE-2024-49513",
"product_status": {
"known_affected": [
"T039772"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49513"
},
{
"cve": "CVE-2024-49550",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-49550"
},
{
"cve": "CVE-2024-54032",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54032"
},
{
"cve": "CVE-2024-54033",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54033"
},
{
"cve": "CVE-2024-54034",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54034"
},
{
"cve": "CVE-2024-54035",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54035"
},
{
"cve": "CVE-2024-54036",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54036"
},
{
"cve": "CVE-2024-54037",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54037"
},
{
"cve": "CVE-2024-54038",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54038"
},
{
"cve": "CVE-2024-54039",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54039"
},
{
"cve": "CVE-2024-54040",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54040"
},
{
"cve": "CVE-2024-54041",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54041"
},
{
"cve": "CVE-2024-54042",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54042"
},
{
"cve": "CVE-2024-54043",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54043"
},
{
"cve": "CVE-2024-54044",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54044"
},
{
"cve": "CVE-2024-54045",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54045"
},
{
"cve": "CVE-2024-54046",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54046"
},
{
"cve": "CVE-2024-54047",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54047"
},
{
"cve": "CVE-2024-54048",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54048"
},
{
"cve": "CVE-2024-54049",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54049"
},
{
"cve": "CVE-2024-54050",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54050"
},
{
"cve": "CVE-2024-54051",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54051"
},
{
"cve": "CVE-2024-54052",
"product_status": {
"known_affected": [
"T039773",
"T039774"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-54052"
},
{
"cve": "CVE-2024-52833",
"product_status": {
"known_affected": [
"T039785"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52833"
},
{
"cve": "CVE-2024-52999",
"product_status": {
"known_affected": [
"T039785"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-52999"
},
{
"cve": "CVE-2024-53000",
"product_status": {
"known_affected": [
"T039785"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53000"
},
{
"cve": "CVE-2024-53001",
"product_status": {
"known_affected": [
"T039785"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53001"
},
{
"cve": "CVE-2024-53002",
"product_status": {
"known_affected": [
"T039785"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53002"
},
{
"cve": "CVE-2024-53003",
"product_status": {
"known_affected": [
"T039785"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53003"
},
{
"cve": "CVE-2024-53004",
"product_status": {
"known_affected": [
"T039785"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53004"
},
{
"cve": "CVE-2024-53005",
"product_status": {
"known_affected": [
"T039785"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53005"
},
{
"cve": "CVE-2024-53006",
"product_status": {
"known_affected": [
"T039785"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53006"
},
{
"cve": "CVE-2024-53007",
"product_status": {
"known_affected": [
"T039785"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53007"
},
{
"cve": "CVE-2024-53955",
"product_status": {
"known_affected": [
"T039787",
"T039786"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53955"
},
{
"cve": "CVE-2024-53956",
"product_status": {
"known_affected": [
"T039791",
"T039790"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53956"
},
{
"cve": "CVE-2024-53957",
"product_status": {
"known_affected": [
"T039793"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53957"
},
{
"cve": "CVE-2024-53958",
"product_status": {
"known_affected": [
"T039793"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53958"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…