Browse CVEs

HIGH 7.8 CVE-2026-21287 Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the c… Substance 3d Stager 3.1.6+ Fix from $1,9502026-01-13 HIGH 7.8 CVE-2026-21305 Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution … Substance 3d Painter 11.1.2+ Fix from $1,9502026-01-13 HIGH 7.8 CVE-2026-21306 Substance3D - Sampler versions 5.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… Substance 3d Sampler 5.1.3+ Fix from $1,9502026-01-13 HIGH 7.8 CVE-2026-21307 Substance3D - Designer versions 15.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… Substance 3d Designer 15.1.0+ Fix from $1,9502026-01-13 MEDIUM 5.5 CVE-2026-21308 Substance3D - Designer versions 15.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacke… Substance 3d Designer 15.1.0+ Fix from $1,6002026-01-13 HIGH 7.8 CVE-2026-21283 Bridge versions 15.1.2, 16.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in … Bridge 15.1.3+ Fix from $1,9502026-01-13 HIGH 7.8 CVE-2026-21304 InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… Indesign 20.5.1 / 21.1+ Fix from $1,9502026-01-13 MEDIUM 5.5 CVE-2026-21288 Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-servi… Illustrator 29.8.4+ Fix from $1,6002026-01-13 HIGH 8.6 CVE-2026-21280 Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in… Illustrator 29.8.4+ Fix from $1,9502026-01-13 HIGH 7.8 CVE-2026-21275 InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary co… Indesign 20.5.1 / 21.1+ Fix from $1,9502026-01-13 HIGH 7.8 CVE-2026-21276 InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary co… Indesign 20.5.1 / 21.1+ Fix from $1,9502026-01-13 HIGH 7.8 CVE-2026-21277 InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… Indesign 20.5.1 / 21.1+ Fix from $1,9502026-01-13 HIGH 7.8 CVE-2026-21281 InCopy versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in … Incopy 20.5.1+ Fix from $1,9502026-01-13 MEDIUM 5.5 CVE-2026-21278 InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacke… Indesign 20.5.1 / 21.1+ Fix from $1,6002026-01-13 HIGH 8.6 CVE-2026-21267 Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injec… Dreamweaver 21.7+ Fix from $1,9502026-01-13 HIGH 8.6 CVE-2026-21268 Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executio… Dreamweaver 21.7+ Fix from $1,9502026-01-13 HIGH 8.6 CVE-2026-21271 Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executio… Dreamweaver 21.7+ Fix from $1,9502026-01-13 HIGH 8.6 CVE-2026-21272 Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system wri… Dreamweaver 21.7+ Fix from $1,9502026-01-13 HIGH 7.8 CVE-2026-21274 Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution … Dreamweaver 21.7+ Fix from $1,9502026-01-13 MEDIUM 5.4 CVE-2025-64873 Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10 MEDIUM 5.4 CVE-2025-64875 Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10 MEDIUM 5.4 CVE-2025-64881 Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10 MEDIUM 5.4 CVE-2025-64887 Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10 MEDIUM 5.4 CVE-2025-64888 Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10 MEDIUM 5.4 CVE-2025-64857 Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10 MEDIUM 5.4 CVE-2025-64858 Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10 MEDIUM 5.4 CVE-2025-64861 Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10 MEDIUM 5.4 CVE-2025-64863 Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10 MEDIUM 5.4 CVE-2025-64869 Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10 MEDIUM 5.4 CVE-2025-64840 Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low … Experience Manager 6.5.24.0 / 2025.12.0+ Fix from $1,6002025-12-10