Adobe vulnerabilities
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-48294Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability.
- CVE-2026-47963DNG SDK | Out-of-bounds Read (CWE-125)
- CVE-2026-47934DNG SDK | Out-of-bounds Read (CWE-125)
- CVE-2026-47964DNG SDK | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-47927DNG SDK | Out-of-bounds Read (CWE-125)
- CVE-2026-47965Acrobat Reader | Out-of-bounds Write (CWE-787)
- CVE-2026-34711CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
- CVE-2026-34712CAI Content Credentials | Improper Input Validation (CWE-20)
- CVE-2026-47904CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
- CVE-2026-47903CAI Content Credentials | Improper Input Validation (CWE-20)
- CVE-2026-47902CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
- CVE-2026-47905CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
- CVE-2026-34657CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-34713CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
- CVE-2026-47938Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-48303Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- CVE-2026-48291Format Plugins | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-48292Format Plugins | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-47929ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-47932ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-47960ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2026-47928ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-47931ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-47930ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-47933ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-47937Acrobat Reader | Uncontrolled Search Path Element (CWE-427)
- CVE-2026-47916Acrobat Reader | Use After Free (CWE-416)
- CVE-2026-47918Acrobat Reader | Use After Free (CWE-416)
- CVE-2026-47915Acrobat Reader | Use After Free (CWE-416)
- CVE-2026-47923Acrobat Reader | Out-of-bounds Read (CWE-125)