Adobe Prelude vulnerabilities

20 CVEs affecting Adobe Prelude, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-44362, published 2023-12-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-9679, published 2020-07-22. Medium severity, CVSS 6.5. EPSS: 4.8% chance of exploitation in the next 30 days. Adobe Prelude versions 9.0 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-9677, published 2020-07-22. High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Prelude versions 9.0 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-9678, published 2020-07-22. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. Adobe Prelude versions 9.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2020-9680, published 2020-07-22. High severity, CVSS 8.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Prelude versions 9.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2021-35999, published 2021-08-20. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Adobe Prelude version 10.0 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to…
CVE-2021-43012, published 2021-11-16. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the…
CVE-2021-43011, published 2021-11-16. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the…
CVE-2021-42738, published 2021-11-22. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially resulting in arbitrary code execution in the…
CVE-2021-40775, published 2021-11-22. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the…
CVE-2021-40772, published 2021-11-22. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the…

Latest

CVE-2023-44362, published 2023-12-13. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Adobe Prelude versions 22.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this…
CVE-2021-44696, published 2023-07-12. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Prelude version 22.1.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
CVE-2021-43754, published 2022-06-15. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. Adobe Prelude version 22.1.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the…
CVE-2021-42737, published 2021-11-22. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the…
CVE-2021-40774, published 2021-11-22. Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days. Adobe Prelude version 10.1 (and earlier) is affected by a null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability…
CVE-2021-40773, published 2021-11-22. Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days. Adobe Prelude version 10.1 (and earlier) is affected by a null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability…
CVE-2021-40771, published 2021-11-22. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the…