Adobe Premiere Rush vulnerabilities

23 CVEs affecting Adobe Premiere Rush, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-22244, published 2023-02-17.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-9655, published 2020-06-25. High severity, CVSS 7.8. EPSS: 6.2% chance of exploitation in the next 30 days. Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution .
• CVE-2020-9657, published 2020-06-25. High severity, CVSS 7.8. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
• CVE-2020-9656, published 2020-06-25. High severity, CVSS 7.8. EPSS: 4.1% chance of exploitation in the next 30 days. Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
• CVE-2020-9617, published 2020-06-26. Medium severity, CVSS 5.5. EPSS: 2.8% chance of exploitation in the next 30 days. Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
• CVE-2021-43025, published 2021-12-20. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution…
• CVE-2021-43023, published 2021-12-20. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EPS/TIFF file, potentially resulting in arbitrary code…
• CVE-2021-43747, published 2021-12-20. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution…
• CVE-2021-43029, published 2021-12-20. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution…
• CVE-2021-43028, published 2021-12-20. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution…
• CVE-2021-43026, published 2021-12-20. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially resulting in arbitrary code execution…

Latest

• CVE-2023-22244, published 2023-02-17. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Adobe Premiere Rush version 2.6 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…
• CVE-2023-22234, published 2023-02-17. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
• CVE-2022-23204, published 2022-02-16. Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days. Adobe Premiere Rush versions 2.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
• CVE-2021-43750, published 2021-12-20. Medium severity, CVSS 5.5. EPSS: 1.4% chance of exploitation in the next 30 days. Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application…
• CVE-2021-43749, published 2021-12-20. Medium severity, CVSS 5.5. EPSS: 1.4% chance of exploitation in the next 30 days. Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application…
• CVE-2021-43748, published 2021-12-20. Medium severity, CVSS 5.5. EPSS: 1.4% chance of exploitation in the next 30 days. Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application…
• CVE-2021-43746, published 2021-12-20. Medium severity, CVSS 5.5. EPSS: 1.8% chance of exploitation in the next 30 days. Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations.…
• CVE-2021-43030, published 2021-12-20. Low severity, CVSS 3.3. EPSS: 1.4% chance of exploitation in the next 30 days. Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User…