cisa.gov | Bulletins
Follow
Vulnerability Summary for the Week of January 13, 2025
Multiple vulnerabilities have been discovered in various products, including 1000 Projects' Campaign Management System Platform for Women, Adobe's Illustrator and Substance3D Stager, and others. These vulnerabilities include SQL injection, integer underflow, stack-based buffer overflow, and out-of-bounds write vulnerabilities, among others. Exploitation of these issues may result in arbitrary code execution, denial of service, or other security consequences. Many of these vulnerabilities require user interaction, such as opening a malicious file, to be exploited. Others can be exploited remotely without user interaction. The vulnerabilities have been assigned various CVSS scores, ranging from 7.1 to 9.1, indicating their severity. Affected products and versions are listed, along with the dates the vulnerabilities were published. Some of the vulnerabilities have been addressed through improved state management, memory handling, and other security measures. Users are advised to update their products to the latest versions to mitigate these vulnerabilities. Failure to do so may result in successful exploitation by attackers.