Description
Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Products
- Adobe Dreamweaver
- Adobe Dreamweaver
- Adobe Dreamweaver 1.0.0
- Adobe Dreamweaver 10.0 (CS4)
- Adobe Dreamweaver 11.0 (CS5)
- Adobe Dreamweaver 13.0
- Adobe Dreamweaver 13.1
- Adobe Dreamweaver 13.2
- Adobe Dreamweaver 14.0
- Adobe Dreamweaver 18.0
- Adobe Dreamweaver 19.0
- Adobe Dreamweaver 19.1
- Adobe Dreamweaver 20.0
- Adobe Dreamweaver 20.1
- Adobe Dreamweaver 20.2.1
- Adobe Dreamweaver 20.2
- Adobe Dreamweaver 21.0
- Adobe Dreamweaver 21.1
- Adobe Dreamweaver 21.4
- Adobe Dreamweaver MX
- Adobe Dreamweaver MX 2004
- Adobe Dreamweaver 8.0
- Adobe Dreamweaver 9.0 (CS3)
Questions to Ask Vendors
- Can you confirm whether your systems are affected by CVE-2025-30310, and if so, what steps are you currently taking to mitigate this vulnerability?
- What is your estimated timeline for fully resolving CVE-2025-30310 in your products or services, and how will you communicate updates on this issue to us as your customer?
Recommended Actions
- Check out the advisory links provided below.
References