Adobe vulnerabilities
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-92908Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-92909Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-100133Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-92911Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-84395Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-83963Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2026-81998Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2026-83962Substance3D - Modeler | Stack-based Buffer Overflow (CWE-121)
- CVE-2026-79906Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2026-75743Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)
- CVE-2026-75745Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)
- CVE-2026-82000Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-75744Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-81995Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)
- CVE-2026-81999Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-75689Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-83964Adobe Connect | Improper Certificate Validation (CWE-295)
- CVE-2026-34689Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-75686Adobe Connect | Improper Input Validation (CWE-20)
- CVE-2026-75682Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-48361Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-75698Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2026-75684Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-75697Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-75658Bridge | Out-of-bounds Write (CWE-787)
- CVE-2026-75656Bridge | Out-of-bounds Read (CWE-125)
- CVE-2026-75649Bridge | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-75676Bridge | Stack-based Buffer Overflow (CWE-121)
- CVE-2026-75655Bridge | Uncontrolled Recursion (CWE-674)
- CVE-2026-75665Bridge | Heap-based Buffer Overflow (CWE-122)