Adobe vulnerabilities
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-48275Illustrator | Untrusted Search Path (CWE-426)
- CVE-2026-48320ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2026-48324ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-48332ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-48318ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-48327ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-48338ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-48329ColdFusion | Insufficient Session Expiration (CWE-613)
- CVE-2026-48319ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-48321ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-48322ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-48284ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-48328ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-48325ColdFusion | Missing Authentication for Critical Function (CWE-306)
- CVE-2026-48340Bridge | Untrusted Pointer Dereference (CWE-822)
- CVE-2026-48343Bridge | Out-of-bounds Write (CWE-787)
- CVE-2026-48339Bridge | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-48311Bridge | Out-of-bounds Write (CWE-787)
- CVE-2026-48342Bridge | Integer Overflow or Wraparound (CWE-190)
- CVE-2026-48341Bridge | Out-of-bounds Write (CWE-787)
- CVE-2026-48272Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
- CVE-2026-48344GoCart | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
- CVE-2026-48367After Effects | Out-of-bounds Write (CWE-787)
- CVE-2026-48274After Effects | Out-of-bounds Write (CWE-787)
- CVE-2026-48269Premiere Pro | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-48369Premiere Pro | Out-of-bounds Write (CWE-787)
- CVE-2026-48270Premiere Pro | Out-of-bounds Write (CWE-787)
- CVE-2026-48308Premiere Pro | Improper Input Validation (CWE-20)
- CVE-2026-47971Media Encoder | Stack-based Buffer Overflow (CWE-121)
- CVE-2026-48366Media Encoder | Out-of-bounds Write (CWE-787)