Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of March 10, 2025

Multiple vulnerabilities have been discovered in various products, including 1E Client, springboot-openai-chatgpt, a2rocklobster FTP Sync, Adobe Acrobat Reader, Adobe Illustrator, Adobe InDesign Desktop, Adobe Substance3D - Designer, Adobe Substance3D - Modeler, Adobe Substance3D - Painter, and Adobe Substance3D - Sampler. These vulnerabilities include improper link resolution, improper authorization, hard-coded credentials, cross-site request forgery, access of uninitialized pointer, use after free, out-of-bounds read and write, stack-based buffer overflow, heap-based buffer overflow, and untrusted search path. The CVSS scores for these vulnerabilities range from 7.1 to 7.8, indicating high severity. Exploitation of these issues often requires user interaction, such as opening a malicious file. The affected products and versions are listed, along with the corresponding CVE numbers. The vendors were contacted about these disclosures, but some did not respond. The products use rolling releases or do not use versioning, making it difficult to determine affected and unaffected releases. The vulnerabilities were published on various dates in March 2025. Users are advised to take necessary precautions to prevent exploitation of these vulnerabilities.