VDB
CVE-2023-25885
CVE-2023-25885
PUBLISHED
CVSS 7.800000190734863 HIGH
Adobe has released an update for Adobe Dimension. This update addresses critical and important vulnerabilities in Adobe Dimension. Successful exploitation could lead to memory leak and arbitrary code execution in the context of the current user. Vulnerability: Heap-based Buffer Overflow (CWE-122) Impact: Arbitrary code execution Severity: Critical CVSS: 7.8 CWE: CWE-122
EPSS 0.42% · 35.0th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.42%
35.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Adobe Dimension | 3.4.7, 3.4.7, 3.4.7 |
Timeline
- Mar 14, 2023 CVE Published
- Mar 29, 2023 EPSS Score
- May 6, 2023 EPSS Score
- Jun 14, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
- Aug 29, 2023 EPSS Score
- Oct 7, 2023 EPSS Score
- Nov 14, 2023 EPSS Score
- Dec 22, 2023 EPSS Score
- Mar 8, 2024 EPSS Score
- Apr 15, 2024 EPSS Score
- May 23, 2024 EPSS Score