NVD disclosure day

Published threat advisories for May 23, 2019

CVE-2019-7106

Adobe XD Path Traversal Vulnerability Allows Code Execution

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

Adobe XD software has a path traversal vulnerability that may allow arbitrary code execution if a user opens a specially crafted file. This could impact the confidentiality, integrity, and availability of the affected system.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2019-7105

Adobe XD Path Traversal Vulnerability Allows Code Execution

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A path traversal vulnerability in Adobe XD could allow arbitrary code execution if a user opens a specially crafted file. While this client-side software is not typically a network-facing service, confirming its presence and relevance within the organization is advisable.

NVD modified: NVD date unavailable