Adobe Dimension vulnerabilities

116 CVEs affecting Adobe Dimension, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-61801, published 2025-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-28595, published 2021-08-20. High severity, CVSS 7.8. EPSS: 3.8% chance of exploitation in the next 30 days. Adobe Dimension version 3.4 (and earlier) is affected by an Uncontrolled Search Path Element element. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution…
CVE-2021-44181, published 2021-12-20. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2021-44180, published 2021-12-20. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2021-44179, published 2021-12-20. High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days. Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in…
CVE-2021-44182, published 2021-12-20. Low severity, CVSS 3.3. EPSS: 1.8% chance of exploitation in the next 30 days. Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
CVE-2021-43763, published 2021-12-20. Low severity, CVSS 3.3. EPSS: 1.8% chance of exploitation in the next 30 days. Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
CVE-2021-44183, published 2021-12-20. Low severity, CVSS 3.3. EPSS: 1.6% chance of exploitation in the next 30 days. Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
CVE-2022-38444, published 2022-10-14. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2022-38442, published 2022-10-14. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2022-38441, published 2022-10-14. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker…

Latest

CVE-2025-61801, published 2025-10-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2025-61800, published 2025-10-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dimension versions 4.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2025-61799, published 2025-10-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An…
CVE-2025-61798, published 2025-10-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An…
CVE-2025-54238, published 2025-08-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in…
CVE-2025-47135, published 2025-07-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass…
CVE-2025-30312, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2025-43572, published 2025-05-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2025-43548, published 2025-05-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2024-45150, published 2024-10-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…