# cve.now: Adobe

The newest entries naming Adobe as an affected vendor (up to 200), of 5,219 in all, 22 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-123259](https://cve.now/CVE-2026-123259.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-123258](https://cve.now/CVE-2026-123258.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-119017](https://cve.now/CVE-2026-119017.md): Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 9.9)
- [CVE-2026-118482](https://cve.now/CVE-2026-118482.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 5.4)
- [CVE-2026-118481](https://cve.now/CVE-2026-118481.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-118480](https://cve.now/CVE-2026-118480.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-118479](https://cve.now/CVE-2026-118479.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-118478](https://cve.now/CVE-2026-118478.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-118197](https://cve.now/CVE-2026-118197.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-114372](https://cve.now/CVE-2026-114372.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-114371](https://cve.now/CVE-2026-114371.md): Adobe Experience Manager | Incorrect Authorization (CWE-863) (CVSS 9.9)
- [CVE-2026-113580](https://cve.now/CVE-2026-113580.md): Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.9)
- [CVE-2026-113579](https://cve.now/CVE-2026-113579.md): Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.9)
- [CVE-2026-123341](https://cve.now/CVE-2026-123341.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-121898](https://cve.now/CVE-2026-121898.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.9)
- [CVE-2026-121896](https://cve.now/CVE-2026-121896.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.9)
- [CVE-2026-121913](https://cve.now/CVE-2026-121913.md): Adobe Connect | Incorrect Authorization (CWE-863) (CVSS 8.8)
- [CVE-2026-121908](https://cve.now/CVE-2026-121908.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.9)
- [CVE-2026-121352](https://cve.now/CVE-2026-121352.md): Adobe Connect | Incorrect Authorization (CWE-863) (CVSS 10.0)
- [CVE-2026-121912](https://cve.now/CVE-2026-121912.md): Adobe Connect | Cross-site Scripting (XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-121887](https://cve.now/CVE-2026-121887.md): Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 9.9)
- [CVE-2026-121350](https://cve.now/CVE-2026-121350.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 7.7)
- [CVE-2026-121349](https://cve.now/CVE-2026-121349.md): Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 9.6)
- [CVE-2026-121910](https://cve.now/CVE-2026-121910.md): Adobe Connect | Cross-site Scripting (XSS) (CWE-79) (CVSS 5.4)
- [CVE-2026-121900](https://cve.now/CVE-2026-121900.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 8.3)
- [CVE-2026-121355](https://cve.now/CVE-2026-121355.md): Adobe Connect | Incorrect Authorization (CWE-863) (CVSS 9.1)
- [CVE-2026-121351](https://cve.now/CVE-2026-121351.md): Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 10.0)
- [CVE-2026-121889](https://cve.now/CVE-2026-121889.md): Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 10.0)
- [CVE-2026-121894](https://cve.now/CVE-2026-121894.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.9)
- [CVE-2026-121356](https://cve.now/CVE-2026-121356.md): Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 10.0)
- [CVE-2026-121906](https://cve.now/CVE-2026-121906.md): Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 9.9)
- [CVE-2026-121353](https://cve.now/CVE-2026-121353.md): Adobe Connect | Improper Neutralization of CRLF Sequences ('CRLF Injection') (CWE-93) (CVSS 10.0)
- [CVE-2026-121904](https://cve.now/CVE-2026-121904.md): Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.6)
- [CVE-2026-121890](https://cve.now/CVE-2026-121890.md): Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 7.7)
- [CVE-2026-121902](https://cve.now/CVE-2026-121902.md): Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.4)
- [CVE-2026-121354](https://cve.now/CVE-2026-121354.md): Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 9.9)
- [CVE-2026-121892](https://cve.now/CVE-2026-121892.md): Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.9)
- [CVE-2026-122102](https://cve.now/CVE-2026-122102.md): Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.7)
- [CVE-2026-118483](https://cve.now/CVE-2026-118483.md): Dimension | Improper Input Validation (CWE-20) (CVSS 8.2)
- [CVE-2026-122100](https://cve.now/CVE-2026-122100.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 5.5)
- [CVE-2026-118484](https://cve.now/CVE-2026-118484.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 6.5)
- [CVE-2026-113573](https://cve.now/CVE-2026-113573.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.9)
- [CVE-2026-122097](https://cve.now/CVE-2026-122097.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 6.5)
- [CVE-2026-113572](https://cve.now/CVE-2026-113572.md): CAI Content Credentials | Use of a Broken or Risky Cryptographic Algorithm (CWE-327) (CVSS 5.9)
- [CVE-2026-122098](https://cve.now/CVE-2026-122098.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 5.1)
- [CVE-2026-123262](https://cve.now/CVE-2026-123262.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 5.9)
- [CVE-2026-123261](https://cve.now/CVE-2026-123261.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 5.9)
- [CVE-2026-123267](https://cve.now/CVE-2026-123267.md): CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 5.5)
- [CVE-2026-113574](https://cve.now/CVE-2026-113574.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 4.0)
- [CVE-2026-123260](https://cve.now/CVE-2026-123260.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 4.0)
- [CVE-2026-122101](https://cve.now/CVE-2026-122101.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 3.7)
- [CVE-2026-122099](https://cve.now/CVE-2026-122099.md): CAI Content Credentials | Incorrect Authorization (CWE-863) (CVSS 2.9)
- [CVE-2026-116003](https://cve.now/CVE-2026-116003.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113575](https://cve.now/CVE-2026-113575.md): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8)
- [CVE-2026-118198](https://cve.now/CVE-2026-118198.md): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-118199](https://cve.now/CVE-2026-118199.md): Photoshop Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-117547](https://cve.now/CVE-2026-117547.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-116480](https://cve.now/CVE-2026-116480.md): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8)
- [CVE-2026-113578](https://cve.now/CVE-2026-113578.md): Photoshop Desktop | Uncontrolled Recursion (CWE-674) (CVSS 5.5)
- [CVE-2026-117546](https://cve.now/CVE-2026-117546.md): Photoshop Desktop | Use After Free (CWE-416) (CVSS 7.8)
- [CVE-2026-114373](https://cve.now/CVE-2026-114373.md): Photoshop Desktop | Divide By Zero (CWE-369) (CVSS 5.5)
- [CVE-2026-113571](https://cve.now/CVE-2026-113571.md): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-118200](https://cve.now/CVE-2026-118200.md): Photoshop Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-113569](https://cve.now/CVE-2026-113569.md): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-115345](https://cve.now/CVE-2026-115345.md): Photoshop Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-113562](https://cve.now/CVE-2026-113562.md): Audition | Improper Input Validation (CWE-20) (CVSS 7.7)
- [CVE-2026-113558](https://cve.now/CVE-2026-113558.md): Audition | Improper Input Validation (CWE-20) (CVSS 8.6)
- [CVE-2026-113557](https://cve.now/CVE-2026-113557.md): Audition | Improper Input Validation (CWE-20) (CVSS 8.6)
- [CVE-2026-113565](https://cve.now/CVE-2026-113565.md): Audition | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113553](https://cve.now/CVE-2026-113553.md): Audition | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113560](https://cve.now/CVE-2026-113560.md): Audition | Incorrect Authorization (CWE-863) (CVSS 7.7)
- [CVE-2026-113551](https://cve.now/CVE-2026-113551.md): Audition | Violation of Secure Design Principles (CWE-657) (CVSS 8.7)
- [CVE-2026-113567](https://cve.now/CVE-2026-113567.md): Audition | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113549](https://cve.now/CVE-2026-113549.md): Audition | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-113555](https://cve.now/CVE-2026-113555.md): Audition | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113563](https://cve.now/CVE-2026-113563.md): Audition | Violation of Secure Design Principles (CWE-657) (CVSS 8.6)
- [CVE-2026-82002](https://cve.now/CVE-2026-82002.md): Media Encoder | Incorrect Authorization (CWE-863) (CVSS 7.7)
- [CVE-2026-113547](https://cve.now/CVE-2026-113547.md): Media Encoder | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113541](https://cve.now/CVE-2026-113541.md): Media Encoder | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113545](https://cve.now/CVE-2026-113545.md): Media Encoder | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113543](https://cve.now/CVE-2026-113543.md): Media Encoder | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113539](https://cve.now/CVE-2026-113539.md): Media Encoder | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-113523](https://cve.now/CVE-2026-113523.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113534](https://cve.now/CVE-2026-113534.md): After Effects | Improper Input Validation (CWE-20) (CVSS 8.6)
- [CVE-2026-110093](https://cve.now/CVE-2026-110093.md): After Effects | Out-of-bounds Read (CWE-125) (CVSS 3.3)
- [CVE-2026-113512](https://cve.now/CVE-2026-113512.md): After Effects | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8)
- [CVE-2026-113528](https://cve.now/CVE-2026-113528.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113521](https://cve.now/CVE-2026-113521.md): After Effects | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-113538](https://cve.now/CVE-2026-113538.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113525](https://cve.now/CVE-2026-113525.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113519](https://cve.now/CVE-2026-113519.md): After Effects | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-113526](https://cve.now/CVE-2026-113526.md): After Effects | Violation of Secure Design Principles (CWE-657) (CVSS 8.6)
- [CVE-2026-113517](https://cve.now/CVE-2026-113517.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113536](https://cve.now/CVE-2026-113536.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113532](https://cve.now/CVE-2026-113532.md): After Effects | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 8.6)
- [CVE-2026-113530](https://cve.now/CVE-2026-113530.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-123263](https://cve.now/CVE-2026-123263.md): After Effects | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8)
- [CVE-2026-113516](https://cve.now/CVE-2026-113516.md): After Effects | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-113514](https://cve.now/CVE-2026-113514.md): After Effects | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-110091](https://cve.now/CVE-2026-110091.md): Premiere Pro | Missing Authentication for Critical Function (CWE-306) (CVSS 7.1)
- [CVE-2026-113577](https://cve.now/CVE-2026-113577.md): Premiere Pro | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-110089](https://cve.now/CVE-2026-110089.md): Premiere Pro | Buffer Underwrite ('Buffer Underflow') (CWE-124) (CVSS 7.8)
- [CVE-2026-110085](https://cve.now/CVE-2026-110085.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-110087](https://cve.now/CVE-2026-110087.md): Premiere Pro | Buffer Overflow (CWE-120) (CVSS 6.7)
- [CVE-2026-110088](https://cve.now/CVE-2026-110088.md): Premiere Pro | Buffer Overflow (CWE-120) (CVSS 7.8)
- [CVE-2026-82012](https://cve.now/CVE-2026-82012.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-110086](https://cve.now/CVE-2026-110086.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-104352](https://cve.now/CVE-2026-104352.md): Premiere Pro | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-110090](https://cve.now/CVE-2026-110090.md): Premiere Pro | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 7.1)
- [CVE-2026-48402](https://cve.now/CVE-2026-48402.md): Premiere Pro | Untrusted Search Path (CWE-426) (CVSS 7.8)
- [CVE-2020-9709](https://cve.now/CVE-2020-9709.md): Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security bypass vulnerability. (CVSS 8.8)
- [CVE-2019-16447](https://cve.now/CVE-2019-16447.md): Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability. (CVSS 7.8)
- [CVE-2026-113576](https://cve.now/CVE-2026-113576.md): Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 6.3)
- [CVE-2026-104353](https://cve.now/CVE-2026-104353.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (CVSS 9.9)
- [CVE-2026-105780](https://cve.now/CVE-2026-105780.md): Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) (CVSS 9.9)
- [CVE-2026-105489](https://cve.now/CVE-2026-105489.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.9)
- [CVE-2026-104350](https://cve.now/CVE-2026-104350.md): Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 9.3)
- [CVE-2026-105781](https://cve.now/CVE-2026-105781.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 10.0)
- [CVE-2026-104351](https://cve.now/CVE-2026-104351.md): Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.9)
- [CVE-2026-104354](https://cve.now/CVE-2026-104354.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.1)
- [CVE-2026-105779](https://cve.now/CVE-2026-105779.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.1)
- [CVE-2026-48360](https://cve.now/CVE-2026-48360.md): Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.6)
- [CVE-2026-48380](https://cve.now/CVE-2026-48380.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-48379](https://cve.now/CVE-2026-48379.md): Substance3D - Painter | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8)
- [CVE-2026-104349](https://cve.now/CVE-2026-104349.md): Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427) (CVSS 7.3)
- [CVE-2026-100134](https://cve.now/CVE-2026-100134.md): Acrobat for Edge | Out-of-bounds Write (CWE-787) (CVSS 8.8)
- [CVE-2026-100132](https://cve.now/CVE-2026-100132.md): Acrobat for Edge | Out-of-bounds Read (CWE-125) (CVSS 4.3)
- [CVE-2026-100119](https://cve.now/CVE-2026-100119.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)
- [CVE-2026-102501](https://cve.now/CVE-2026-102501.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.3)
- [CVE-2026-100114](https://cve.now/CVE-2026-100114.md): CAI Content Credentials | Improper Access Control (CWE-284) (CVSS 7.5)
- [CVE-2026-100136](https://cve.now/CVE-2026-100136.md): CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) (CVSS 7.5)
- [CVE-2026-103294](https://cve.now/CVE-2026-103294.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 5.9)
- [CVE-2026-100139](https://cve.now/CVE-2026-100139.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5)
- [CVE-2026-104345](https://cve.now/CVE-2026-104345.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)
- [CVE-2026-105902](https://cve.now/CVE-2026-105902.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5)
- [CVE-2026-103297](https://cve.now/CVE-2026-103297.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5)
- [CVE-2026-103296](https://cve.now/CVE-2026-103296.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5)
- [CVE-2026-100116](https://cve.now/CVE-2026-100116.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 5.9)
- [CVE-2026-100123](https://cve.now/CVE-2026-100123.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5)
- [CVE-2026-48378](https://cve.now/CVE-2026-48378.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.3)
- [CVE-2026-95633](https://cve.now/CVE-2026-95633.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5)
- [CVE-2026-100122](https://cve.now/CVE-2026-100122.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5)
- [CVE-2026-102502](https://cve.now/CVE-2026-102502.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 5.3)
- [CVE-2026-100121](https://cve.now/CVE-2026-100121.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5)
- [CVE-2026-100120](https://cve.now/CVE-2026-100120.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)
- [CVE-2026-95634](https://cve.now/CVE-2026-95634.md): CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 8.6)
- [CVE-2026-100115](https://cve.now/CVE-2026-100115.md): CAI Content Credentials | Improper Access Control (CWE-284) (CVSS 7.5)
- [CVE-2026-100137](https://cve.now/CVE-2026-100137.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5)
- [CVE-2026-100117](https://cve.now/CVE-2026-100117.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)
- [CVE-2026-100135](https://cve.now/CVE-2026-100135.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)
- [CVE-2026-100118](https://cve.now/CVE-2026-100118.md): CAI Content Credentials | Improper Certificate Validation (CWE-295) (CVSS 7.5)
- [CVE-2026-100113](https://cve.now/CVE-2026-100113.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)
- [CVE-2026-100124](https://cve.now/CVE-2026-100124.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5)
- [CVE-2026-106627](https://cve.now/CVE-2026-106627.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5)
- [CVE-2026-95632](https://cve.now/CVE-2026-95632.md): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (CVSS 7.5)
- [CVE-2026-100125](https://cve.now/CVE-2026-100125.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.9)
- [CVE-2026-100138](https://cve.now/CVE-2026-100138.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5)
- [CVE-2026-48377](https://cve.now/CVE-2026-48377.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.3)
- [CVE-2026-103820](https://cve.now/CVE-2026-103820.md): CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) (CVSS 5.5)
- [CVE-2026-100128](https://cve.now/CVE-2026-100128.md): Bridge | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-100129](https://cve.now/CVE-2026-100129.md): Bridge | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-100126](https://cve.now/CVE-2026-100126.md): Bridge | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-100127](https://cve.now/CVE-2026-100127.md): Bridge | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-103822](https://cve.now/CVE-2026-103822.md): Substance3D - Designer | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-103825](https://cve.now/CVE-2026-103825.md): Substance3D - Designer | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-103823](https://cve.now/CVE-2026-103823.md): Substance3D - Designer | Stack-based Buffer Overflow (CWE-121) (CVSS 5.5)
- [CVE-2026-103824](https://cve.now/CVE-2026-103824.md): Substance3D - Designer | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-103826](https://cve.now/CVE-2026-103826.md): Substance3D - Designer | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-103827](https://cve.now/CVE-2026-103827.md): Substance3D - Designer | Stack-based Buffer Overflow (CWE-121) (CVSS 5.5)
- [CVE-2026-103828](https://cve.now/CVE-2026-103828.md): Substance3D - Designer | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-103821](https://cve.now/CVE-2026-103821.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-103829](https://cve.now/CVE-2026-103829.md): Substance3D - Designer | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-83966](https://cve.now/CVE-2026-83966.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-100131](https://cve.now/CVE-2026-100131.md): Substance3D - Sampler | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-83965](https://cve.now/CVE-2026-83965.md): Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8)
- [CVE-2026-100130](https://cve.now/CVE-2026-100130.md): Substance3D - Sampler | Out-of-bounds Read (CWE-125) (CVSS 5.5)
- [CVE-2026-96521](https://cve.now/CVE-2026-96521.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-96522](https://cve.now/CVE-2026-96522.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-83661](https://cve.now/CVE-2026-83661.md): Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8)
- [CVE-2026-95635](https://cve.now/CVE-2026-95635.md): Photoshop Desktop | Double Free (CWE-415) (CVSS 7.8)
- [CVE-2026-95638](https://cve.now/CVE-2026-95638.md): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8)
- [CVE-2026-96523](https://cve.now/CVE-2026-96523.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-104346](https://cve.now/CVE-2026-104346.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-95637](https://cve.now/CVE-2026-95637.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-97312](https://cve.now/CVE-2026-97312.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-95639](https://cve.now/CVE-2026-95639.md): Photoshop Desktop | Incorrect Authorization (CWE-863) (CVSS 8.6)
- [CVE-2026-100111](https://cve.now/CVE-2026-100111.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-104347](https://cve.now/CVE-2026-104347.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-95636](https://cve.now/CVE-2026-95636.md): Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8)
- [CVE-2026-104348](https://cve.now/CVE-2026-104348.md): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8)
- [CVE-2026-100112](https://cve.now/CVE-2026-100112.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-95640](https://cve.now/CVE-2026-95640.md): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-105896](https://cve.now/CVE-2026-105896.md): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5)
- [CVE-2026-95641](https://cve.now/CVE-2026-95641.md): Photoshop Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8)
- [CVE-2026-105897](https://cve.now/CVE-2026-105897.md): ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 8.6)
- [CVE-2026-106616](https://cve.now/CVE-2026-106616.md): ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) (CVSS 8.6)
- [CVE-2026-34633](https://cve.now/CVE-2026-34633.md): ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 7.7)
- [CVE-2026-106618](https://cve.now/CVE-2026-106618.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 8.8)
- [CVE-2026-105994](https://cve.now/CVE-2026-105994.md): ColdFusion | Incorrect Authorization (CWE-863) (CVSS 7.7)
- [CVE-2026-106622](https://cve.now/CVE-2026-106622.md): ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 10.0)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/adobe
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.