Browse CVEs

MEDIUM 5.4 CVE-2026-34624 Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could … Experience Manager 6.5.11.8+ Fix from $1,6002026-04-14 MEDIUM 5.4 CVE-2026-34625 Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could … Experience Manager 6.5.11.8+ Fix from $1,6002026-04-14 MEDIUM 5.4 CVE-2026-34623 Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could … Experience Manager 6.5.11.8+ Fix from $1,6002026-04-14 HIGH 7.8 CVE-2026-34628 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… Indesign 20.5.3 / 21.3+ Fix from $1,9502026-04-14 HIGH 7.8 CVE-2026-34629 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… Indesign 20.5.3 / 21.3+ Fix from $1,9502026-04-14 CRITICAL 9.3 CVE-2026-34615 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary cod… Connect 12.11 / 2025.9.15+ Fix from $2,3002026-04-14 HIGH 8.7 CVE-2026-34617 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could result in privilege escalation… Connect 12.11 / 2025.9.15+ Fix from $1,9502026-04-14 HIGH 7.8 CVE-2026-34627 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… Indesign 20.5.3 / 21.3+ Fix from $1,9502026-04-14 MEDIUM 6.1 CVE-2026-34614 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to conv… Connect 12.11 / 2025.9.15+ Fix from $1,6002026-04-14 CRITICAL 9.6 CVE-2026-27303 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary cod… Connect 12.11 / 2025.9.15+ Fix from $2,3002026-04-14 CRITICAL 9.3 CVE-2026-27246 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this… Connect 12.11 / 2025.9.15+ Fix from $2,3002026-04-14 MEDIUM 5.5 CVE-2026-27258 DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An att… Dng Software Development Kit after 1.7.1 Fix from $1,6002026-04-14 MEDIUM 5.4 CVE-2026-27288 Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could … Experience Manager 6.5.11.8+ Fix from $1,6002026-04-14 CRITICAL 9.3 CVE-2026-27243 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this… Connect 12.11 / 2025.9.15+ Fix from $2,3002026-04-14 CRITICAL 9.3 CVE-2026-27245 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this… Connect 12.11 / 2025.9.15+ Fix from $2,3002026-04-14 MEDIUM 6.1 CVE-2026-21331 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to conv… Connect 12.11 / 2025.9.15+ Fix from $1,6002026-04-14 HIGH 8.6 CVE-2026-34622 Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototyp… Acrobat 24.001.30365 / 26.001.21431+ Fix from $1,9502026-04-14 MEDIUM 6.3 CVE-2026-34626 Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototyp… Acrobat 24.001.30365 / 26.001.21431+ Fix from $1,6002026-04-14 HIGH 7.8 CVE-2026-27284 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could resul… Indesign 20.5.3 / 21.3+ Fix from $1,9502026-04-14 HIGH 7.8 CVE-2026-27291 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… Indesign 20.5.3 / 21.3+ Fix from $1,9502026-04-14 MEDIUM 5.5 CVE-2026-27285 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to application denial-o… Indesign 20.5.3 / 21.3+ Fix from $1,6002026-04-14 MEDIUM 5.5 CVE-2026-27286 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An … Indesign 20.5.3+ Fix from $1,6002026-04-14 HIGH 7.8 CVE-2026-27238 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… Indesign 20.5.3 / 21.3+ Fix from $1,9502026-04-14 HIGH 7.8 CVE-2026-27283 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in th… Indesign 20.5.3 / 21.3+ Fix from $1,9502026-04-14 HIGH 8.6 CVE-2026-34621 KEVEPSS 7% Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes (… Acrobat Dc 24.001.30360 / 24.001.30362+ Fix from $1,9502026-04-11 HIGH 7.8 CVE-2026-27309 Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the c… Substance 3d Stager 3.1.8+ Fix from $1,9502026-03-27 HIGH 8.1 CVE-2026-21361 Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (… Commerce 1.3.3 / 2.4.4+ Fix from $1,9502026-03-11 HIGH 8.0 CVE-2026-21311 Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (… Commerce 1.3.3 / 2.4.4+ Fix from $1,9502026-03-11 HIGH 7.5 CVE-2026-21309 Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vuln… Commerce 1.3.3 / 2.4.4+ Fix from $1,9502026-03-11 MEDIUM 6.8 CVE-2026-21360 Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Limitation of a Pat… Commerce 1.3.3 / 2.4.4+ Fix from $1,6002026-03-11