PatchTheCVEedraw max vulnerabilities and fixes
Recent CVEs affecting edraw max, with upgrade or downgrade steps. 2 tracked.
Also searched as: edrawmax.
edraw max has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-06-19. Highest priority: CVE-2019-12897 (score 60/100).
- CVE-2019-12897 HIGH 7.5 DOWNGRADE Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::C
- CVE-2019-12896 HIGH 7.5 DOWNGRADE Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77.
FAQ
How do I fix edraw max vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is edraw max being exploited right now?
None of the tracked edraw max CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which edraw max CVE should I patch first?
CVE-2019-12897 currently ranks highest (60/100): Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::C.