[ Vendor · 281 CVEs ]

Adobe

CVEs affecting Adobe published in the last 30 days, plus any Adobe CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-90531 13 Oct 2026 CVSS 9.6 Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege…
CVE-2026-90532 13 Oct 2026 CVSS 10.0 Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the…
CVE-2026-83958 13 Oct 2026 CVSS 5.4 Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-83960 13 Oct 2026 CVSS 5.4 Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-83662 13 Oct 2026 CVSS 9.3 Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject…
CVE-2026-75732 13 Oct 2026 CVSS 9.9 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the…
CVE-2026-48383 13 Oct 2026 CVSS 10.0 Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the…
CVE-2026-48398 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-48382 13 Oct 2026 CVSS 10.0 Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the…
CVE-2026-110083 13 Oct 2026 CVSS 7.1 Adobe Experience Manager 6.5Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that…
CVE-2026-110084 13 Oct 2026 CVSS 7.1 Adobe Experience Manager 6.5Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass. A…
CVE-2026-110074 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-110075 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-110076 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-110077 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-110078 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-110079 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-110080 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-110081 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-110082 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a…
CVE-2026-109415 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-110037 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-110073 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-106634 13 Oct 2026 CVSS 7.7 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could…
CVE-2026-107305 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-107682 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-106626 13 Oct 2026 CVSS 9.1 Adobe Experience Manager as a Cloud ServiceAdobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of…
CVE-2026-106628 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-106629 13 Oct 2026 CVSS 9.3 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious…
CVE-2026-106630 13 Oct 2026 CVSS 9.3 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious…
CVE-2026-106631 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-106632 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating…
CVE-2026-106633 13 Oct 2026 CVSS 5.4 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
CVE-2026-105895 13 Oct 2026 CVSS 9.9 Adobe Experience Manager 6.5Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of…
CVE-2026-103854 13 Oct 2026 CVSS 7.8 Adobe DimensionDimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-103855 13 Oct 2026 CVSS 5.5 Adobe DimensionDimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit…
CVE-2026-103846 13 Oct 2026 CVSS 8.6 Adobe DimensionDimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution…
CVE-2026-103847 13 Oct 2026 CVSS 8.6 Adobe DimensionDimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An…
CVE-2026-103848 13 Oct 2026 CVSS 9.9 Adobe Experience Manager 6.5 LTSAdobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability…
CVE-2026-103850 13 Oct 2026 CVSS 5.5 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage…
CVE-2026-103851 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the…
CVE-2026-103852 13 Oct 2026 CVSS 5.5 Adobe Substance 3D StagerSubstance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could…
CVE-2026-103853 13 Oct 2026 CVSS 5.5 Adobe DimensionDimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this…
CVE-2026-103837 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-103838 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-103839 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-103840 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an…
CVE-2026-103841 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an…
CVE-2026-103842 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an…
CVE-2026-103843 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user…
CVE-2026-103844 13 Oct 2026 CVSS 7.8 Adobe DimensionDimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user…
CVE-2026-103845 13 Oct 2026 CVSS 8.6 Adobe DimensionDimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the…
CVE-2026-103830 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the…
CVE-2026-103832 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-103833 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-103834 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-103835 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-103836 13 Oct 2026 CVSS 7.8 Adobe Substance 3D StagerSubstance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-95630 13 Oct 2026 CVSS 4.3 Adobe CommerceAdobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker…
CVE-2026-95631 13 Oct 2026 CVSS 8.7 Adobe CommerceAdobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-91013 13 Oct 2026 CVSS 9.3 Adobe CommerceAdobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
CVE-2026-92464 13 Oct 2026 CVSS 9.1 Adobe CommerceAdobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-92908 13 Oct 2026 CVSS 8.3 Adobe CommerceAdobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker…
CVE-2026-92909 13 Oct 2026 CVSS 9.8 Adobe CommerceAdobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-92910 13 Oct 2026 CVSS 7.2 Adobe CommerceAdobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage…
CVE-2026-92911 13 Oct 2026 CVSS 8.7 Adobe CommerceAdobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious…
CVE-2026-92922 13 Oct 2026 CVSS 8.1 Adobe CommerceAdobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject…
CVE-2026-106625 13 Oct 2026 CVSS 7.8 Adobe FrameMaker 2026Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-104342 13 Oct 2026 CVSS 7.8 Adobe FrameMaker 2026Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user…
CVE-2026-104343 13 Oct 2026 CVSS 5.5 Adobe FrameMaker 2026Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could…
CVE-2026-104344 13 Oct 2026 CVSS 7.8 Adobe FrameMaker 2026Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the…
CVE-2026-103856 13 Oct 2026 CVSS 5.5 Adobe FrameMaker 2026Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage…
CVE-2026-103857 13 Oct 2026 CVSS 5.5 Adobe FrameMaker 2026Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage…
CVE-2026-103966 13 Oct 2026 CVSS 7.8 Adobe FrameMaker 2026Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the…
CVE-2026-103967 13 Oct 2026 CVSS 7.8 Adobe FrameMaker 2026Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-104340 13 Oct 2026 CVSS 7.8 Adobe FrameMaker 2026Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the…
CVE-2026-104341 13 Oct 2026 CVSS 7.8 Adobe FrameMaker 2026Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-103849 13 Oct 2026 CVSS 10.0 Adobe CommerceAdobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary…
CVE-2026-100133 13 Oct 2026 CVSS 9.3 Adobe CommerceAdobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
CVE-2026-75743 22 Sep 2026 CVSS 7.1 Adobe AEM 6.5 Forms JEEAdobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass…
CVE-2026-75745 22 Sep 2026 CVSS 10.0 Adobe AEM 6.5 Forms JEEAdobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…
CVE-2026-82000 22 Sep 2026 CVSS 9.6 Adobe AEM 6.5 Forms JEEAdobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A…
CVE-2026-75744 22 Sep 2026 CVSS 8.1 Adobe AEM 6.5 Forms JEEAdobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged…
CVE-2026-81995 22 Sep 2026 CVSS 9.1 Adobe AEM 6.5 Forms JEEAdobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the…
CVE-2026-81999 22 Sep 2026 CVSS 8.7 Adobe AEM 6.5 Forms JEEAdobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An…
CVE-2026-75689 22 Sep 2026 CVSS 9.3 Adobe ConnectAdobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
CVE-2026-83964 22 Sep 2026 CVSS 6.2 Adobe ConnectAdobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could…
CVE-2026-34689 22 Sep 2026 CVSS 8.6 Adobe ConnectAdobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to…
CVE-2026-75682 22 Sep 2026 CVSS 9.9 Adobe ConnectAdobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result…
CVE-2026-75686 22 Sep 2026 CVSS 9.3 Adobe ConnectAdobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-48361 22 Sep 2026 CVSS 6.1 Adobe ConnectAdobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
CVE-2026-75684 22 Sep 2026 CVSS 9.3 Adobe ConnectAdobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
CVE-2026-75698 22 Sep 2026 CVSS 9.3 Adobe ConnectAdobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious…
CVE-2026-75697 22 Sep 2026 CVSS 9.3 Adobe ConnectAdobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
CVE-2026-75650 7 Sep 2026 CVSS 10.0 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template EngineAdobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary… ExploitedFix
CVE-2026-71362 11 Aug 2026 CVSS 9.1 Privilege escalation in Adobe Commerce and MagentoAdobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this… Exploited
CVE-2026-48282 30 Jun 2026 CVSS 10.0 Adobe ColdFusion Path TraversalColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… Exploited
CVE-2026-34621 11 Apr 2026 CVSS 8.6 Adobe Acrobat and Reader Prototype PollutionAcrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes… Exploited
CVE-2025-54236 9 Sep 2025 CVSS 9.1 Adobe Commerce and Magento Improper Input ValidationAdobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation… Exploited
CVE-2025-54253 5 Aug 2025 CVSS 10.0 Adobe Experience Manager Forms Code ExecutionAdobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution… Exploited
Page 2 of 3