adobe
777 known vulnerabilities affecting adobe products.
Products
experience_manager 214
coldfusion 68
acrobat 61
commerce 58
commerce_b2b 58
magento 58
c2pa 55
acrobat_dc 54
acrobat_reader_dc 54
c2pa-web 49
c2patool 33
indesign 29
bridge 23
illustrator 23
substance_3d_designer 23
campaign 22
after_effects 21
substance_3d_painter 21
substance_3d_sampler 16
dng_software_development_kit 15
i\/o_events 14
substance_3d_stager 13
lightroom 12
audition 12
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-21276 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of … | |
| CVE-2026-71383 | Medium | 0.2% | 7.3 | is affected by an Incorrect Authorization vulnerability that could result in a S… | |
| CVE-2026-47931 | Medium | 0.2% | 8.4 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Inpu… | |
| CVE-2026-48442 | Medium | 0.2% | 7.1 | CAI Content Credentials is affected by an Improper Limitation of a Pathname to a… | |
| CVE-2026-21299 | Medium | 0.2% | 7.8 | Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-boun… | |
| CVE-2026-34630 | Medium | 0.2% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-34674 | Medium | 0.2% | 7.8 | Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Bu… | |
| CVE-2026-21274 | Medium | 0.2% | 7.8 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Autho… | |
| CVE-2026-48349 | Medium | 0.2% | 8.1 | Animate is affected by an Incorrect Authorization vulnerability that could resul… | |
| CVE-2026-21357 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based … | |
| CVE-2026-27313 | Medium | 0.2% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-48374 | Medium | 0.2% | 7.8 | Bridge is affected by an Improper Limitation of a Pathname to a Restricted Direc… | |
| CVE-2026-48396 | Medium | 0.2% | 8.6 | Bridge is affected by an Incorrect Authorization vulnerability that could result… | |
| CVE-2026-21272 | Medium | 0.2% | 8.6 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input … | |
| CVE-2026-21320 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnera… | |
| CVE-2026-21323 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnera… | |
| CVE-2026-21326 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnera… | |
| CVE-2026-21329 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnera… | |
| CVE-2026-21351 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnera… | |
| CVE-2026-48395 | Medium | 0.2% | 8.6 | Bridge is affected by an Untrusted Search Path vulnerability that could result i… | |
| CVE-2026-48272 | Medium | 0.2% | 7.8 | Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulner… | |
| CVE-2026-75771 | Medium | 0.2% | 7.8 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability… | |
| CVE-2026-75862 | Medium | 0.2% | 7.8 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability… | |
| CVE-2026-75863 | Medium | 0.2% | 7.8 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability… | |
| CVE-2026-82007 | Medium | 0.2% | 7.8 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability… | |
| CVE-2026-48287 | Medium | 0.2% | 7.4 | CAI Content Credentials is affected by an Untrusted Search Path vulnerability th… | |
| CVE-2026-21281 | Medium | 0.2% | 7.8 | InCopy versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Ove… | |
| CVE-2026-21298 | Medium | 0.2% | 7.8 | Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-boun… | |
| CVE-2026-27278 | Medium | 0.2% | 7.8 | Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are… | |
| CVE-2026-83961 | Medium | 0.2% | 7.1 | ColdFusion is affected by an Improper Authentication vulnerability that could re… | |
| CVE-2026-27309 | Medium | 0.2% | 7.8 | Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free… | |
| CVE-2026-21305 | Medium | 0.2% | 7.8 | Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-boun… | |
| CVE-2026-21321 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by an Integer Overflow or W… | |
| CVE-2026-21322 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by an out-of-bounds read vu… | |
| CVE-2026-21324 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by an out-of-bounds read vu… | |
| CVE-2026-21325 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by an out-of-bounds read vu… | |
| CVE-2026-21330 | Medium | 0.2% | 7.8 | After Effects versions 25.6 and earlier are affected by an Access of Resource Us… | |
| CVE-2026-48348 | Medium | 0.2% | 7.7 | Animate is affected by an Incorrect Authorization vulnerability that could resul… | |
| CVE-2026-75991 | Medium | 0.2% | 8.6 | Illustrator is affected by an Improper Input Validation vulnerability that could… | |
| CVE-2026-81975 | Medium | 0.2% | 7.8 | Acrobat Reader is affected by a Use After Free vulnerability that could result i… | |
| CVE-2026-21287 | Medium | 0.2% | 7.8 | Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free… | |
| CVE-2026-27280 | Medium | 0.2% | 7.8 | DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write v… | |
| CVE-2026-27289 | Medium | 0.2% | 7.8 | Photoshop Desktop versions 27.4 and earlier are affected by an out-of-bounds rea… | |
| CVE-2026-76199 | Medium | 0.2% | 8.6 | Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerabili… | |
| CVE-2026-34687 | Medium | 0.2% | 7.8 | Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffe… | |
| CVE-2026-47916 | Medium | 0.2% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-81992 | Medium | 0.2% | 7.8 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that co… | |
| CVE-2026-48391 | Medium | 0.2% | 8.2 | Bridge is affected by an Untrusted Search Path vulnerability that could result i… | |
| CVE-2026-47964 | Medium | 0.2% | 7.8 | DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Over… | |
| CVE-2026-27287 | Medium | 0.2% | 7.8 | InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read v… |