CyberAlerts

CVE-2025-30328

Description: Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS: HIGH (7.8)

EPSS Score: 0.03%

Source: CVE

May 13th, 2025 (about 1 month ago)

CVE-2025-30326

Photoshop Desktop | Access of Uninitialized Pointer (CWE-824)

Description: Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS: HIGH (7.8)

EPSS Score: 0.03%

Source: CVE

May 13th, 2025 (about 1 month ago)

CVE-2025-30325

Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

Description: Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS: HIGH (7.8)

EPSS Score: 0.03%

SSVC Exploitation: none

Source: CVE

May 13th, 2025 (about 1 month ago)

CVE-2025-30324

Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

Description: Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS: HIGH (7.8)

EPSS Score: 0.03%

Source: CVE

May 13th, 2025 (about 1 month ago)

CVE-2025-30322

Substance3D - Painter | Out-of-bounds Write (CWE-787)

Description: Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS: HIGH (7.8)

EPSS Score: 0.03%

Source: CVE

May 13th, 2025 (about 1 month ago)

CVE-2025-30318

InDesign Desktop | Out-of-bounds Write (CWE-787)

Description: InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS: HIGH (7.8)

EPSS Score: 0.03%

Source: CVE

May 13th, 2025 (about 1 month ago)

CVE-2025-27197

Lightroom Desktop | Out-of-bounds Write (CWE-787)

Description: Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS: HIGH (7.8)

EPSS Score: 0.03%

SSVC Exploitation: none

Source: CVE

May 13th, 2025 (about 1 month ago)

CVE-2025-0035

Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary...

Description: Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution.

CVSS: HIGH (7.3)

EPSS Score: 0.01%

SSVC Exploitation: none

Source: CVE

May 13th, 2025 (about 1 month ago)

CVE-2024-36321

Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code...

Description: Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution.

CVSS: HIGH (7.3)

EPSS Score: 0.01%

SSVC Exploitation: none

Source: CVE

May 13th, 2025 (about 1 month ago)

ZDI-25-285: Dassault Systèmes eDrawings Viewer SLDPRT File Parsing Use-After-Free Remote Code Execution Vulnerability

Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-1884.

CVSS: HIGH (7.8)

EPSS Score: 0.02%

Source: Zero Day Initiative Published Advisories

May 13th, 2025 (about 1 month ago)

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-30328	Animate \| Out-of-bounds Write (CWE-787) Description: Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. CVSS: HIGH (7.8) EPSS Score: 0.03% Source: CVE May 13th, 2025 (about 1 month ago)
CVE-2025-30326	Photoshop Desktop \| Access of Uninitialized Pointer (CWE-824) Description: Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. CVSS: HIGH (7.8) EPSS Score: 0.03% Source: CVE May 13th, 2025 (about 1 month ago)
CVE-2025-30325	Photoshop Desktop \| Integer Overflow or Wraparound (CWE-190) Description: Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. CVSS: HIGH (7.8) EPSS Score: 0.03% SSVC Exploitation: none Source: CVE May 13th, 2025 (about 1 month ago)
CVE-2025-30324	Photoshop Desktop \| Integer Underflow (Wrap or Wraparound) (CWE-191) Description: Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. CVSS: HIGH (7.8) EPSS Score: 0.03% Source: CVE May 13th, 2025 (about 1 month ago)
CVE-2025-30322	Substance3D - Painter \| Out-of-bounds Write (CWE-787) Description: Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. CVSS: HIGH (7.8) EPSS Score: 0.03% Source: CVE May 13th, 2025 (about 1 month ago)
CVE-2025-30318	InDesign Desktop \| Out-of-bounds Write (CWE-787) Description: InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. CVSS: HIGH (7.8) EPSS Score: 0.03% Source: CVE May 13th, 2025 (about 1 month ago)
CVE-2025-27197	Lightroom Desktop \| Out-of-bounds Write (CWE-787) Description: Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. CVSS: HIGH (7.8) EPSS Score: 0.03% SSVC Exploitation: none Source: CVE May 13th, 2025 (about 1 month ago)
CVE-2025-0035	Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary... Description: Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution. CVSS: HIGH (7.3) EPSS Score: 0.01% SSVC Exploitation: none Source: CVE May 13th, 2025 (about 1 month ago)
CVE-2024-36321	Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code... Description: Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution. CVSS: HIGH (7.3) EPSS Score: 0.01% SSVC Exploitation: none Source: CVE May 13th, 2025 (about 1 month ago)
	ZDI-25-285: Dassault Systèmes eDrawings Viewer SLDPRT File Parsing Use-After-Free Remote Code Execution Vulnerability Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-1884. CVSS: HIGH (7.8) EPSS Score: 0.02% Source: Zero Day Initiative Published Advisories May 13th, 2025 (about 1 month ago)