VDB

CVE-2023-25882

CVE-2023-25882 PUBLISHED CVSS 7.800000190734863 HIGH

Adobe has released an update for Adobe Dimension. This update addresses  critical and important vulnerabilities in  Adobe Dimension.  Successful exploitation could lead to memory leak and arbitrary code execution in the context of the current user. Vulnerability: Heap-based Buffer Overflow (CWE-122) Impact: Arbitrary code execution Severity: Critical CVSS: 7.8 CWE: CWE-122

EPSS 0.44% · 36.7th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.44%
36.7th percentile

Affected Products

VendorProductVersions
AdobeAdobe Dimension3.4.7, 3.4.7, 3.4.7

Timeline

  • Mar 14, 2023 CVE Published
  • Mar 29, 2023 EPSS Score
  • May 7, 2023 EPSS Score
  • Jun 15, 2023 EPSS Score
  • Jul 24, 2023 EPSS Score
  • Sep 1, 2023 EPSS Score
  • Oct 10, 2023 EPSS Score
  • Nov 18, 2023 EPSS Score
  • Dec 27, 2023 EPSS Score
  • Mar 14, 2024 EPSS Score
  • Apr 22, 2024 EPSS Score
  • May 31, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›