adobe
777 known vulnerabilities affecting adobe products.
Products
experience_manager 214
coldfusion 68
acrobat 61
commerce 58
commerce_b2b 58
magento 58
c2pa 55
acrobat_dc 54
acrobat_reader_dc 54
c2pa-web 49
c2patool 33
indesign 29
bridge 23
illustrator 23
substance_3d_designer 23
campaign 22
after_effects 21
substance_3d_painter 21
substance_3d_sampler 16
dng_software_development_kit 15
i\/o_events 14
substance_3d_stager 13
lightroom 12
audition 12
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-71360 | Medium | 0.5% | 7.5 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln… | |
| CVE-2026-71442 | Medium | 0.5% | 7.5 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound)… | |
| CVE-2026-71443 | Medium | 0.5% | 7.5 | CAI Content Credentials is affected by an Improper Input Validation vulnerabilit… | |
| CVE-2026-21279 | Medium | 0.5% | 8.2 | is affected by an Improper Input Validation vulnerability that could result in a… | |
| CVE-2026-48326 | Medium | 0.5% | 9.9 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia… | |
| CVE-2026-48317 | Medium | 0.5% | 9.6 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Direct… | |
| CVE-2026-77774 | Medium | 0.5% | 8.6 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-48333 | Medium | 0.5% | 9.8 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi… | |
| CVE-2026-77108 | Medium | 0.5% | 7.5 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-48331 | Medium | 0.5% | 10.0 | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF)… | |
| CVE-2026-77111 | Medium | 0.5% | 8.7 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-48321 | Medium | 0.5% | 9.3 | ColdFusion is affected by an Incorrect Authorization vulnerability that could re… | |
| CVE-2026-48399 | Medium | 0.5% | 7.5 | Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Princip… | |
| CVE-2026-76200 | Medium | 0.5% | 9.3 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability … | |
| CVE-2026-76201 | Medium | 0.5% | 9.3 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability … | |
| CVE-2026-47960 | Medium | 0.5% | 7.4 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Rest… | |
| CVE-2026-21290 | Medium | 0.5% | 8.7 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-47938 | Medium | 0.4% | 10.0 | Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected … | |
| CVE-2026-21361 | Medium | 0.4% | 8.1 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-34660 | Medium | 0.4% | 9.3 | Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Inco… | |
| CVE-2026-34711 | Medium | 0.4% | 7.5 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are af… | |
| CVE-2026-34622 | Medium | 0.4% | 8.6 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are… | |
| CVE-2026-34617 | Medium | 0.4% | 8.7 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Sc… | |
| CVE-2026-34646 | Medium | 0.4% | 7.5 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-77109 | Medium | 0.4% | 8.6 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-48327 | Medium | 0.4% | 9.0 | ColdFusion is affected by an Incorrect Authorization vulnerability that could re… | |
| CVE-2026-34712 | Medium | 0.4% | 7.5 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are af… | |
| CVE-2026-34713 | Medium | 0.4% | 7.5 | CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are af… | |
| CVE-2026-34686 | Medium | 0.4% | 8.7 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-48334 | Medium | 0.4% | 9.3 | Illustrator is affected by an Improper Input Validation vulnerability that could… | |
| CVE-2026-47995 | Medium | 0.4% | 8.1 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability … | |
| CVE-2026-76202 | Medium | 0.4% | 8.2 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-71384 | Medium | 0.4% | 9.6 | is affected by an Incorrect Authorization vulnerability that could result in a S… | |
| CVE-2026-21284 | Medium | 0.4% | 8.1 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-75993 | Medium | 0.4% | 8.5 | ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. … | |
| CVE-2026-75999 | Medium | 0.4% | 8.4 | ColdFusion is affected by an Improper Input Validation vulnerability that could … | |
| CVE-2026-34691 | Medium | 0.4% | 9.3 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are af… | |
| CVE-2026-27220 | Medium | 0.4% | 7.8 | Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are… | |
| CVE-2026-47971 | Medium | 0.3% | 7.8 | Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that co… | |
| CVE-2026-48269 | Medium | 0.3% | 7.8 | Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that coul… | |
| CVE-2026-48339 | Medium | 0.3% | 7.8 | Bridge is affected by a Heap-based Buffer Overflow vulnerability that could resu… | |
| CVE-2026-48373 | Medium | 0.3% | 7.8 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that co… | |
| CVE-2026-48389 | Medium | 0.3% | 7.8 | DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Ove… | |
| CVE-2026-47912 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-47913 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-47914 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-48350 | Medium | 0.3% | 8.6 | Animate is affected by an Improper Limitation of a Pathname to a Restricted Dire… | |
| CVE-2026-48342 | Medium | 0.3% | 7.8 | Bridge is affected by an Integer Overflow or Wraparound vulnerability that could… | |
| CVE-2026-47915 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-47917 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… |