Adobe Patch Tuesday, July 2007: the CVEs

Adobe Patch Tuesday July 2007: the CVEs Adobe published on 10 July 2007, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Microsoft, SAP. Earlier: Jun 2007, May 2007, Apr 2007, Mar 2007, Feb 2007, Jan 2007, Dec 2006, Nov 2006, Oct 2006, Sep 2006, Aug 2006, Jul 2006. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. –CVE-2007-3640EPSS 3.2%2007-07-10

   Adobe Integrated Runtime (AIR, aka Apollo) allows context-dependent attackers to modify arbitrary files within an executing .air file (compiled AIR application) and perform cross-site scripting (XSS) attacks, as demonstrated by an applicat…