adobe
777 known vulnerabilities affecting adobe products.
Products
experience_manager 214
coldfusion 68
acrobat 61
commerce 58
commerce_b2b 58
magento 58
c2pa 55
acrobat_dc 54
acrobat_reader_dc 54
c2pa-web 49
c2patool 33
indesign 29
bridge 23
illustrator 23
substance_3d_designer 23
campaign 22
after_effects 21
substance_3d_painter 21
substance_3d_sampler 16
dng_software_development_kit 15
i\/o_events 14
substance_3d_stager 13
lightroom 12
audition 12
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-48293 | Medium | 0.1% | 7.8 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bou… | |
| CVE-2026-27272 | Medium | 0.1% | 7.8 | Illustrator versions 29.8.4, 30.1 and earlier are affected by an out-of-bounds w… | |
| CVE-2026-34631 | Medium | 0.1% | 7.8 | InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write … | |
| CVE-2026-34675 | Medium | 0.1% | 7.8 | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-boun… | |
| CVE-2026-34676 | Medium | 0.1% | 7.8 | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-boun… | |
| CVE-2026-34709 | Medium | 0.1% | 7.8 | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bound… | |
| CVE-2026-81996 | Medium | 0.1% | 8.8 | Acrobat Reader is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-27307 | Low | 2.7% | 2.4 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled … | |
| CVE-2026-27308 | Low | 2.5% | 2.4 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled … | |
| CVE-2020-9666 | Low | 2.4% | 5.5 | Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability. Suc… | |
| CVE-2022-42343 | Low | 1.4% | 6.5 | Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected … | |
| CVE-2026-47996 | Low | 0.9% | 6.8 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-76002 | Low | 0.7% | 6.1 | ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. … | |
| CVE-2026-47997 | Low | 0.7% | 5.9 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-47998 | Low | 0.7% | 5.9 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-48384 | Low | 0.7% | 4.9 | ColdFusion is affected by an Improper Input Validation vulnerability that could … | |
| CVE-2026-21360 | Low | 0.6% | 6.8 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-34654 | Low | 0.6% | 5.3 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-48314 | Low | 0.6% | 6.5 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limi… | |
| CVE-2026-48375 | Low | 0.6% | 6.5 | ColdFusion is affected by an Incorrect Authorization vulnerability that could re… | |
| CVE-2026-48329 | Low | 0.6% | 2.7 | ColdFusion is affected by an Insufficient Session Expiration vulnerability that … | |
| CVE-2026-21282 | Low | 0.5% | 5.3 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-48001 | Low | 0.5% | 3.7 | Adobe Commerce is affected by an Information Exposure vulnerability that could l… | |
| CVE-2026-21269 | Low | 0.5% | 4.6 | ColdFusion is affected by a stored Cross-Site Scripting (XSS) vulnerability that… | |
| CVE-2026-48338 | Low | 0.5% | 6.8 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted D… | |
| CVE-2026-48000 | Low | 0.5% | 6.1 | Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability… | |
| CVE-2026-47922 | Low | 0.4% | 4.7 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vuln… | |
| CVE-2026-47999 | Low | 0.4% | 4.8 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability … | |
| CVE-2026-34656 | Low | 0.4% | 4.3 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-48263 | Low | 0.4% | 5.4 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln… | |
| CVE-2026-48355 | Low | 0.4% | 5.4 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln… | |
| CVE-2026-48371 | Low | 0.4% | 5.4 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability … | |
| CVE-2026-48436 | Low | 0.4% | 6.5 | CAI Content Credentials is affected by an Improper Input Validation vulnerabilit… | |
| CVE-2026-34685 | Low | 0.4% | 3.4 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-34655 | Low | 0.4% | 4.8 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-75726 | Low | 0.4% | 3.5 | Adobe Experience Manager is affected by an Improper Input Validation vulnerabili… | |
| CVE-2026-48288 | Low | 0.4% | 3.5 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affec… | |
| CVE-2026-48253 | Low | 0.4% | 5.4 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v… | |
| CVE-2026-48254 | Low | 0.4% | 5.4 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v… | |
| CVE-2026-48255 | Low | 0.4% | 5.4 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v… | |
| CVE-2026-48257 | Low | 0.4% | 5.4 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v… | |
| CVE-2026-48260 | Low | 0.4% | 5.4 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v… | |
| CVE-2026-48261 | Low | 0.4% | 5.4 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v… | |
| CVE-2026-48262 | Low | 0.4% | 5.4 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v… | |
| CVE-2026-21297 | Low | 0.4% | 4.3 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-21296 | Low | 0.3% | 4.3 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-34626 | Low | 0.3% | 6.3 | Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are… | |
| CVE-2026-76000 | Low | 0.3% | 6.5 | ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability tha… | |
| CVE-2026-21310 | Low | 0.3% | 5.3 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-21286 | Low | 0.3% | 5.3 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … |