Adobe Digital Editions vulnerabilities

71 CVEs affecting Adobe Digital Editions, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-21582, published 2023-04-12.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-0954, published 2016-03-09. Critical severity, CVSS 9.8. EPSS: 18.3% chance of exploitation in the next 30 days. Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
• CVE-2017-11272, published 2017-08-11. High severity, CVSS 7.5. EPSS: 13% chance of exploitation in the next 30 days. Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability.
• CVE-2018-12814, published 2018-10-17. Critical severity, CVSS 9.8. EPSS: 11.2% chance of exploitation in the next 30 days. Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
• CVE-2018-12813, published 2018-10-17. Critical severity, CVSS 9.8. EPSS: 11.2% chance of exploitation in the next 30 days. Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
• CVE-2017-11275, published 2017-08-11. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. Adobe Digital Editions 4.5.4 and earlier has an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
• CVE-2017-2973, published 2017-02-15. Critical severity, CVSS 9.8. EPSS: 9.3% chance of exploitation in the next 30 days. Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
• CVE-2019-7095, published 2019-05-24. Critical severity, CVSS 9.8. EPSS: 9.1% chance of exploitation in the next 30 days. Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
• CVE-2017-11274, published 2017-08-11. Critical severity, CVSS 9.8. EPSS: 8.7% chance of exploitation in the next 30 days. Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
• CVE-2017-3092, published 2017-06-20. Critical severity, CVSS 9.8. EPSS: 8.5% chance of exploitation in the next 30 days. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library functions in the…
• CVE-2017-3090, published 2017-06-20. Critical severity, CVSS 9.8. EPSS: 8.5% chance of exploitation in the next 30 days. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the…

Latest

• CVE-2023-21582, published 2023-04-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.…
• CVE-2021-39828, published 2021-09-27. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by a privilege escalation vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability…
• CVE-2021-39827, published 2021-09-27. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability…
• CVE-2021-39826, published 2021-09-27. High severity, CVSS 8.6. EPSS: 2.1% chance of exploitation in the next 30 days. Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary…
• CVE-2021-21100, published 2021-04-15. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to…
• CVE-2020-3798, published 2020-06-26. Medium severity, CVSS 6.5. EPSS: 4.7% chance of exploitation in the next 30 days. Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration (host or local network) vulnerability. Successful exploitation could lead to information disclosure.
• CVE-2020-3760, published 2020-02-13. Critical severity, CVSS 9.8. EPSS: 7.2% chance of exploitation in the next 30 days. Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
• CVE-2020-3759, published 2020-02-13. High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days. Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure.
• CVE-2018-12817, published 2019-01-18. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. Adobe Digital Editions versions 4.5.9 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.