Digital Editions
Vendor:
First CVE: Oct 4, 2002 · Active for 23 years
71
Total CVEs
More Total CVEs than 98% of tracked products
7.1
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 70% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Digital Editions over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 4, 2002
23 years ago
Most Recent CVE
Apr 12, 2023
1,200 days ago
CVE Severity & Scoring
Digital Editions71 CVEs
18%
42%
38%
All CVEs352,708 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local7 (9.9%)
Network59 (83.1%)
Unknown5 (7.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low66 (93.0%)
High0 (0.0%)
Unknown5 (7.0%)
User Interaction
None58 (81.7%)
Unknown5 (7.0%)
Required8 (11.3%)
Privileges Required
Low0 (0.0%)
High2 (2.8%)
None64 (90.1%)
Unknown5 (7.0%)
Top CVEs
Signals from CVEs in this product scope (71 CVEs).
71 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-0954CRITICAL Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. | Mar 9, 2016 | 9.8 | 49 | NO | YES |
CVE-2019-7095CRITICAL Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution. | May 24, 2019 | 9.8 | 35 | NO | NO |
CVE-2018-12823CRITICAL Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution. | Oct 17, 2018 | 9.8 | 34 | NO | NO |
CVE-2018-12814CRITICAL Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution. | Oct 17, 2018 | 9.8 | 34 | NO | NO |
CVE-2018-12813CRITICAL Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution. | Oct 17, 2018 | 9.8 | 34 | NO | NO |
CVE-2017-3088CRITICAL Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. Successful exploitation could lead to arbitrary cod | Jun 20, 2017 | 10.0 | 33 | NO | NO |
CVE-2016-4263CRITICAL Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors. | Sep 16, 2016 | 9.8 | 33 | NO | NO |
CVE-2016-4262CRITICAL Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability t | Sep 16, 2016 | 9.8 | 33 | NO | NO |
CVE-2016-4260CRITICAL Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability t | Sep 16, 2016 | 9.8 | 33 | NO | NO |
CVE-2017-3097CRITICAL Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functions in the installer p | Jun 20, 2017 | 9.8 | 32 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (71 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
2.8% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (71 CVEs).
Media Mentions
Signals from CVEs in this product scope (71 CVEs).
Top CNAs Publishing CVEs For Digital Editions
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.2.2 | 1 | 2.1 | 0.4% | 0 | 0 |
| 9.2.1 | 1 | 2.1 | 0.4% | 0 | 0 |
| 4.5.4 | 1 | 9.8 | 6.2% | 0 | 0 |
| 4.0 | 1 | 5.0 | 1.8% | 0 | 0 |
| 2.2 | 2 | 3.4 | 1.0% | 0 | 1 |
| 2.1 | 1 | 2.1 | 0.4% | 0 | 0 |
| 2.0.1 | 1 | 10.0 | 4.8% | 0 | 0 |
| 2.0.0 | 1 | 10.0 | 3.8% | 0 | 0 |