Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-34623Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-34624Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-27288Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-27303Adobe Connect | Deserialization of Untrusted Data (CWE-502)
- CVE-2026-34617Adobe Connect | Cross-site Scripting (XSS) (CWE-79)
- CVE-2026-21331Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2026-27246Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-34614Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2026-27245Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2026-34615Adobe Connect | Deserialization of Untrusted Data (CWE-502)
- CVE-2026-27243Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2026-34628InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-34629InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-34627InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-27258Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-27284InDesign Desktop | Out-of-bounds Read (CWE-125)
- CVE-2026-27285InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-27286InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-27283InDesign Desktop | Use After Free (CWE-416)
- CVE-2026-27238InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-27291InDesign Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-34622Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
- CVE-2026-34626Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
- CVE-2026-34621Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
- CVE-2026-27309Substance3D - Stager | Use After Free (CWE-416)
- CVE-2026-21291Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-21293Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-21282Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2026-21286Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-21294Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)