adobe
777 known vulnerabilities affecting adobe products.
Products
experience_manager 214
coldfusion 68
acrobat 61
commerce 58
commerce_b2b 58
magento 58
c2pa 55
acrobat_dc 54
acrobat_reader_dc 54
c2pa-web 49
c2patool 33
indesign 29
bridge 23
illustrator 23
substance_3d_designer 23
campaign 22
after_effects 21
substance_3d_painter 21
substance_3d_sampler 16
dng_software_development_kit 15
i\/o_events 14
substance_3d_stager 13
lightroom 12
audition 12
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-76190 | Medium | 1.0% | 8.6 | ColdFusion is affected by an Improper Neutralization of Directives in Dynamicall… | |
| CVE-2026-48449 | Medium | 1.0% | 10.0 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi… | |
| CVE-2026-48351 | Medium | 0.9% | 7.5 | CAI Content Credentials is affected by an Improper Input Validation vulnerabilit… | |
| CVE-2026-48352 | Medium | 0.9% | 7.5 | CAI Content Credentials is affected by an Improper Input Validation vulnerabilit… | |
| CVE-2026-48259 | Medium | 0.9% | 9.6 | Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vul… | |
| CVE-2026-48252 | Medium | 0.9% | 8.6 | Adobe Experience Manager is affected by a Missing Authentication for Critical Fu… | |
| CVE-2026-48345 | Medium | 0.9% | 8.2 | Animate is affected by an Improper Neutralization of Special Elements used in an… | |
| CVE-2026-21267 | Medium | 0.8% | 8.6 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutra… | |
| CVE-2026-48295 | Medium | 0.8% | 7.5 | CAI Content Credentials is affected by an Insufficiently Protected Credentials v… | |
| CVE-2026-48285 | Medium | 0.8% | 8.6 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by a Server-Side Re… | |
| CVE-2026-48328 | Medium | 0.8% | 7.7 | ColdFusion is affected by an Improper Input Validation vulnerability that could … | |
| CVE-2026-48386 | Medium | 0.8% | 7.5 | ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vul… | |
| CVE-2026-71398 | Medium | 0.8% | 10.0 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi… | |
| CVE-2026-48332 | Medium | 0.8% | 7.7 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha… | |
| CVE-2026-34665 | Medium | 0.8% | 7.5 | CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are af… | |
| CVE-2026-77110 | Medium | 0.7% | 7.6 | Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restrict… | |
| CVE-2026-48347 | Medium | 0.7% | 7.7 | Animate is affected by an Improper Neutralization of Special Elements used in an… | |
| CVE-2026-27302 | Medium | 0.7% | 10.0 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi… | |
| CVE-2026-48323 | Medium | 0.7% | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia… | |
| CVE-2026-48330 | Medium | 0.7% | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia… | |
| CVE-2026-27282 | Medium | 0.7% | 7.5 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Inpu… | |
| CVE-2026-47988 | Medium | 0.7% | 8.6 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-76193 | Medium | 0.7% | 10.0 | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF)… | |
| CVE-2026-34651 | Medium | 0.7% | 7.5 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-48440 | Medium | 0.7% | 8.1 | ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could … | |
| CVE-2026-34647 | Medium | 0.7% | 7.4 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-75998 | Medium | 0.6% | 7.5 | ColdFusion is affected by an Improper Access Control vulnerability that could le… | |
| CVE-2026-47984 | Medium | 0.6% | 8.2 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-34659 | Medium | 0.6% | 9.6 | Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deser… | |
| CVE-2026-34615 | Medium | 0.6% | 9.3 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserializati… | |
| CVE-2026-47994 | Medium | 0.6% | 8.7 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability … | |
| CVE-2026-27303 | Medium | 0.6% | 9.6 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserializati… | |
| CVE-2026-34653 | Medium | 0.6% | 8.7 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-21289 | Medium | 0.6% | 7.5 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-48448 | Medium | 0.6% | 8.6 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia… | |
| CVE-2026-48381 | Medium | 0.6% | 9.0 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia… | |
| CVE-2026-19232 | Medium | 0.6% | 9.9 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability… | |
| CVE-2026-47930 | Medium | 0.6% | 8.1 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Inpu… | |
| CVE-2026-21273 | Medium | 0.6% | 8.7 | is affected by an Improper Input Validation vulnerability that could result in p… | |
| CVE-2026-34645 | Medium | 0.6% | 7.5 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-21309 | Medium | 0.6% | 7.5 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-48303 | Medium | 0.6% | 10.0 | Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected … | |
| CVE-2026-48325 | Medium | 0.6% | 9.3 | ColdFusion is affected by a Missing Authentication for Critical Function vulnera… | |
| CVE-2026-48307 | Medium | 0.6% | 8.8 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cros… | |
| CVE-2025-61813 | Medium | 0.5% | 7.4 | ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Impr… | |
| CVE-2026-48397 | Medium | 0.5% | 8.6 | Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerabili… | |
| CVE-2026-34690 | Medium | 0.5% | 7.8 | After Effects is affected by a Stack-based Buffer Overflow vulnerability that co… | |
| CVE-2026-34652 | Medium | 0.5% | 7.5 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-48439 | Medium | 0.5% | 7.5 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln… | |
| CVE-2026-71443 | Medium | 0.5% | 7.5 | CAI Content Credentials is affected by an Improper Input Validation vulnerabilit… |