Adobe vulnerabilities
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-109415Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-107682Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-107305Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-106634Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-106633Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-106632Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-106631Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-106630Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-106629Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-106628Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-106626Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2026-105895Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2026-103848Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2026-104340Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-103856Adobe Framemaker | Out-of-bounds Read (CWE-125)
- CVE-2026-104343Adobe Framemaker | NULL Pointer Dereference (CWE-476)
- CVE-2026-103966Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-106625Adobe Framemaker | Out-of-bounds Write (CWE-787)
- CVE-2026-104341Adobe Framemaker | Out-of-bounds Write (CWE-787)
- CVE-2026-104342Adobe Framemaker | Use After Free (CWE-416)
- CVE-2026-104344Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-103967Adobe Framemaker | Out-of-bounds Write (CWE-787)
- CVE-2026-103857Adobe Framemaker | Out-of-bounds Read (CWE-125)
- CVE-2026-95631Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2026-103849Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
- CVE-2026-92910Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-91013Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-92464Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2026-95630Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2026-92922Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)