Adobe vulnerabilities
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-75663Bridge | Out-of-bounds Write (CWE-787)
- CVE-2026-75632CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
- CVE-2026-75634CAI Content Credentials | Improper Input Validation (CWE-20)
- CVE-2026-75633CAI Content Credentials | Improper Input Validation (CWE-20)
- CVE-2026-19480CAI Content Credentials | Improper Input Validation (CWE-20)
- CVE-2026-89277CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
- CVE-2026-75638CAI Content Credentials | Improper Input Validation (CWE-20)
- CVE-2026-76194CAI Content Credentials | Improper Input Validation (CWE-20)
- CVE-2026-84396InDesign Desktop | NULL Pointer Dereference (CWE-476)
- CVE-2026-76192InDesign Desktop | NULL Pointer Dereference (CWE-476)
- CVE-2026-75703Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-84412Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-89276Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-83660Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-82013Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-82003Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)
- CVE-2026-82009Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-75721Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-75723Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- CVE-2026-75699Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-73369Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-82011Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-82443Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-82008Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)
- CVE-2026-89275Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-75728Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- CVE-2026-82010Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-84397Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-81984Acrobat Reader | Use After Free (CWE-416)
- CVE-2026-81989Acrobat Reader | Use After Free (CWE-416)