adobe
777 known vulnerabilities affecting adobe products.
Products
experience_manager 214
coldfusion 68
acrobat 61
commerce 58
commerce_b2b 58
magento 58
c2pa 55
acrobat_dc 54
acrobat_reader_dc 54
c2pa-web 49
c2patool 33
indesign 29
bridge 23
illustrator 23
substance_3d_designer 23
campaign 22
after_effects 21
substance_3d_painter 21
substance_3d_sampler 16
dng_software_development_kit 15
i\/o_events 14
substance_3d_stager 13
lightroom 12
audition 12
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-21311 | Medium | 0.3% | 8.0 | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, … | |
| CVE-2026-27243 | Medium | 0.3% | 9.3 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cro… | |
| CVE-2026-27245 | Medium | 0.3% | 9.3 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cro… | |
| CVE-2026-27246 | Medium | 0.3% | 9.3 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cro… | |
| CVE-2026-81994 | Medium | 0.3% | 8.2 | Acrobat Reader is affected by an Improperly Controlled Modification of Object Pr… | |
| CVE-2026-27306 | Medium | 0.3% | 8.4 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Inpu… | |
| CVE-2026-34693 | Medium | 0.3% | 8.0 | Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are af… | |
| CVE-2026-47918 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-47919 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-48290 | Medium | 0.3% | 8.2 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vuln… | |
| CVE-2026-48275 | Medium | 0.3% | 8.6 | Illustrator is affected by an Untrusted Search Path vulnerability that could res… | |
| CVE-2026-48340 | Medium | 0.3% | 7.8 | Bridge is affected by an Untrusted Pointer Dereference vulnerability that could … | |
| CVE-2026-21283 | Medium | 0.3% | 7.8 | Bridge versions 15.1.2, 16.0 and earlier are affected by a Heap-based Buffer Ove… | |
| CVE-2026-71387 | Medium | 0.3% | 8.8 | ColdFusion is affected by an Incorrect Authorization vulnerability that could re… | |
| CVE-2026-48291 | Medium | 0.3% | 7.8 | Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Ov… | |
| CVE-2026-48292 | Medium | 0.3% | 7.8 | Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Ov… | |
| CVE-2026-47911 | Medium | 0.3% | 7.8 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a… | |
| CVE-2026-21277 | Medium | 0.3% | 7.8 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based … | |
| CVE-2026-21304 | Medium | 0.3% | 7.8 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based … | |
| CVE-2026-27311 | Medium | 0.3% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-27312 | Medium | 0.3% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-34632 | Medium | 0.3% | 8.6 | Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vu… | |
| CVE-2026-48363 | Medium | 0.3% | 8.2 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled … | |
| CVE-2026-48364 | Medium | 0.3% | 8.2 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled … | |
| CVE-2026-27310 | Medium | 0.3% | 7.8 | Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer O… | |
| CVE-2026-48346 | Medium | 0.3% | 7.9 | Animate is affected by an Untrusted Search Path vulnerability that could result … | |
| CVE-2026-47967 | Medium | 0.3% | 7.8 | Audition is affected by an out-of-bounds write vulnerability that could result i… | |
| CVE-2026-47968 | Medium | 0.3% | 7.8 | Audition is affected by an out-of-bounds write vulnerability that could result i… | |
| CVE-2026-47976 | Medium | 0.3% | 7.8 | Media Encoder is affected by an out-of-bounds write vulnerability that could res… | |
| CVE-2026-48270 | Medium | 0.3% | 7.8 | Premiere Pro is affected by an out-of-bounds write vulnerability that could resu… | |
| CVE-2026-48274 | Medium | 0.3% | 7.8 | After Effects is affected by an out-of-bounds write vulnerability that could res… | |
| CVE-2026-48309 | Medium | 0.3% | 7.8 | Audition is affected by an out-of-bounds write vulnerability that could result i… | |
| CVE-2026-48311 | Medium | 0.3% | 7.8 | Bridge is affected by an out-of-bounds write vulnerability that could result in … | |
| CVE-2026-48335 | Medium | 0.3% | 7.8 | Illustrator is affected by an out-of-bounds write vulnerability that could resul… | |
| CVE-2026-48336 | Medium | 0.3% | 7.8 | Illustrator is affected by an out-of-bounds write vulnerability that could resul… | |
| CVE-2026-48337 | Medium | 0.3% | 7.8 | Illustrator is affected by an out-of-bounds write vulnerability that could resul… | |
| CVE-2026-48341 | Medium | 0.3% | 7.8 | Bridge is affected by an out-of-bounds write vulnerability that could result in … | |
| CVE-2026-48343 | Medium | 0.3% | 7.8 | Bridge is affected by an out-of-bounds write vulnerability that could result in … | |
| CVE-2026-48365 | Medium | 0.3% | 7.8 | Audition is affected by an out-of-bounds write vulnerability that could result i… | |
| CVE-2026-48366 | Medium | 0.3% | 7.8 | Media Encoder is affected by an out-of-bounds write vulnerability that could res… | |
| CVE-2026-48367 | Medium | 0.3% | 7.8 | After Effects is affected by an out-of-bounds write vulnerability that could res… | |
| CVE-2026-48368 | Medium | 0.3% | 7.8 | Audition is affected by an out-of-bounds write vulnerability that could result i… | |
| CVE-2026-48369 | Medium | 0.3% | 7.8 | Premiere Pro is affected by an out-of-bounds write vulnerability that could resu… | |
| CVE-2026-48370 | Medium | 0.3% | 7.8 | Media Encoder is affected by an out-of-bounds write vulnerability that could res… | |
| CVE-2026-76191 | Medium | 0.3% | 8.2 | Animate is affected by an Improper Control of Generation of Code ('Code Injectio… | |
| CVE-2026-21280 | Medium | 0.3% | 8.6 | Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Searc… | |
| CVE-2026-82006 | Medium | 0.2% | 7.8 | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that… | |
| CVE-2026-21268 | Medium | 0.2% | 8.6 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input … | |
| CVE-2026-21271 | Medium | 0.2% | 8.6 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input … | |
| CVE-2026-21275 | Medium | 0.2% | 7.8 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of … |