Adobe Dng Converter vulnerabilities

2 CVEs affecting Adobe Dng Converter, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-11295, published 2017-12-09.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-11295, published 2017-12-09. Critical severity, CVSS 9.8. EPSS: 5.9% chance of exploitation in the next 30 days. An issue was discovered in Adobe DNG Converter 9.12.1 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.
• CVE-2016-7856, published 2016-12-15. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.