adobe
7,295 tracked vulnerabilities.
CVE-2026-34624
MEDIUM
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Apr 14, 2026
CVSS 5.4
EPSS 0.00
CVE-2026-34623
MEDIUM
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Apr 14, 2026
CVSS 5.4
EPSS 0.00
CVE-2026-34629
HIGH
InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
Apr 14, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-34628
HIGH
InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
Apr 14, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-34627
HIGH
InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
Apr 14, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-34617
HIGH
Adobe Connect | Cross-site Scripting (XSS) (CWE-79)
Apr 14, 2026
CVSS 8.7
EPSS 0.00
CVE-2026-34615
CRITICAL
Adobe Connect | Deserialization of Untrusted Data (CWE-502)
Apr 14, 2026
CVSS 9.3
EPSS 0.01
CVE-2026-34614
MEDIUM
Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Apr 14, 2026
CVSS 6.1
EPSS 0.00
CVE-2026-27303
CRITICAL
Adobe Connect | Deserialization of Untrusted Data (CWE-502)
Apr 14, 2026
CVSS 9.6
EPSS 0.01
CVE-2026-27288
MEDIUM
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Apr 14, 2026
CVSS 5.4
EPSS 0.00
CVE-2026-27258
MEDIUM
DNG SDK < 1.7.1 2502 - Out-of-bounds Write
Apr 14, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-27246
CRITICAL
Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
Apr 14, 2026
CVSS 9.3
EPSS 0.00
CVE-2026-27245
CRITICAL
Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Apr 14, 2026
CVSS 9.3
EPSS 0.00
CVE-2026-27243
CRITICAL
Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Apr 14, 2026
CVSS 9.3
EPSS 0.00
CVE-2026-21331
MEDIUM
Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Apr 14, 2026
CVSS 6.1
EPSS 0.00
CVE-2026-34626
MEDIUM
Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
Apr 14, 2026
CVSS 6.3
EPSS 0.00
CVE-2026-34622
HIGH
Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
Apr 14, 2026
CVSS 8.6
EPSS 0.00
CVE-2026-27291
HIGH
InDesign Desktop | Out-of-bounds Write (CWE-787)
Apr 14, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-27286
MEDIUM
InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
Apr 14, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-27285
MEDIUM
InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
Apr 14, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-27284
HIGH
InDesign Desktop | Out-of-bounds Read (CWE-125)
Apr 14, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-27283
HIGH
InDesign Desktop | Use After Free (CWE-416)
Apr 14, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-27238
HIGH
InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
Apr 14, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-34621
HIGH
KEV
Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
Apr 11, 2026
CVSS 8.6
EPSS 0.07
CVE-2026-27309
HIGH
Substance3D - Stager | Use After Free (CWE-416)
Mar 27, 2026
CVSS 7.8
EPSS 0.00
Products
acrobat_dc 1,799
acrobat_reader_dc 1,799
acrobat 1,381
experience_manager 1,148
acrobat_reader 1,085
flash_player 1,084
air 413
air_sdk 409
air_sdk_\&_compiler 365
reader 360
flash_player_desktop_runtime 294
coldfusion 226
indesign 202
commerce 184
experience_manager_cloud_service 183
shockwave_player 174
illustrator 173
magento 161
adobe_air 146
bridge 136
after_effects 125
framemaker 118
dimension 116
commerce_b2b 111
animate 102
adobe_air_sdk 96
photoshop 92
Acrobat Reader 90
air_desktop_runtime 88
substance_3d_stager 87
Quick Filters