Adobe vulnerabilities
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-47976Media Encoder | Out-of-bounds Write (CWE-787)
- CVE-2026-47979Media Encoder | Out-of-bounds Read (CWE-125)
- CVE-2026-48370Media Encoder | Out-of-bounds Write (CWE-787)
- CVE-2026-48346Animate | Untrusted Search Path (CWE-426)
- CVE-2026-48345Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2026-48347Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2026-48349Animate | Incorrect Authorization (CWE-863)
- CVE-2026-48348Animate | Incorrect Authorization (CWE-863)
- CVE-2026-48350Animate | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-47984Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-47997Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-47988Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-47999Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-48358Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)
- CVE-2026-48356Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
- CVE-2026-47998Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-48000Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
- CVE-2026-47995Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-48001Adobe Commerce | Information Exposure (CWE-200)
- CVE-2026-48371Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-47996Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-47994Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-47992Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-48310Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-48259Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-48359Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2026-48263Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-48260Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48355Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-48261Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)