Adobe vulnerabilities
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-48444CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
- CVE-2026-48435CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2026-48439CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
- CVE-2026-48437CAI Content Credentials | Improper Certificate Validation (CWE-295)
- CVE-2026-71389CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2026-71387ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-48385ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2026-71383ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-21279ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-48384ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-48375ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-21269ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-48376ColdFusion | Improper Encoding or Escaping of Output (CWE-116)
- CVE-2026-48440ColdFusion | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-34635ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321)
- CVE-2026-48386ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
- CVE-2026-48362ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2026-71386ColdFusion | Cross-site Scripting (XSS) (CWE-79)
- CVE-2026-71384ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-25652ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-21273ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-71381Adobe Genuine Software Integrity Service | CWE-863 Incorrect Authorization
- CVE-2026-48323Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
- CVE-2026-48333Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- CVE-2026-48317Adobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
- CVE-2026-48331Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-48330Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-48399Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)
- CVE-2026-48326Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-34641Premiere Pro | Out-of-bounds Write (CWE-787)