Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV
TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability Priority CRITICAL 98KEV 2026-09-24TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Priority CRITICAL 100KEV 2026-09-08TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-07-07TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-05-20TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability Priority CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records
Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

94 records in C2pa · all components

TI-2026-73741 CVE-2026-95634 · GHSA-253r-fv58-v6c3

Server-side request forgery in Adobe CAI Content Credentials

Priority MEDIUM 46

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00519 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-918
TI-2026-52923 CVE-2026-75632 · GHSA-c99f-hrqh-3cpm

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

Priority MEDIUM 41

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00902 Published 2026-09-22 Fixed in c2pa-v0.90.17, c2patool-v0.27.17 CWE-400
TI-2026-50063 CVE-2026-71443 · GHSA-xcpm-fvj3-727h

CAI Content Credentials | Improper Input Validation (CWE-20)

Priority MEDIUM 41

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00927 Published 2026-08-25 Fixed in c2patool-v0.27.11, c2pa-v0.90.11 CWE-20
TI-2026-50062 CVE-2026-71442 · GHSA-cf86-7hgp-8xxp

CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

Priority MEDIUM 41

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00902 Published 2026-08-25 Fixed in c2patool-v0.27.11, c2pa-v0.90.11 CWE-191
TI-2026-50009 CVE-2026-71360 · GHSA-3fhm-9gfg-4v5r

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

Priority MEDIUM 41

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00902 Published 2026-08-25 Fixed in c2patool-v0.27.11, c2pa-v0.90.11 CWE-400
TI-2026-35833 CVE-2026-48439 · GHSA-qjjr-945q-3x93

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

Priority MEDIUM 41

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00902 Published 2026-08-11 Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-400
TI-2026-35832 CVE-2026-48438 · GHSA-h7f9-qg9v-qp9w

CAI Content Credentials | NULL Pointer Dereference (CWE-476)

Priority MEDIUM 41

CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00902 Published 2026-08-11 Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-476
TI-2026-35758 CVE-2026-48352 · GHSA-5hq2-2w88-w4q8

CAI Content Credentials | Improper Input Validation (CWE-20)

Priority MEDIUM 41

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00927 Published 2026-07-14 Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-20
TI-2026-35757 CVE-2026-48351 · GHSA-73hf-p3jv-88p6

CAI Content Credentials | Improper Input Validation (CWE-20)

Priority MEDIUM 41

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00927 Published 2026-07-14 Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-20
TI-2026-73692 CVE-2026-106627 · GHSA-mfj9-g945-h3gj

Uncontrolled resource consumption in Adobe CAI Content Credentials

Priority MEDIUM 40

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00675 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-400
TI-2026-73691 CVE-2026-105902 · GHSA-pgc8-xrpv-pcpp

Uncontrolled resource consumption in Adobe CAI Content Credentials

Priority MEDIUM 40

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00541 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-400
TI-2026-73683 CVE-2026-100139 · GHSA-rxm6-8qg9-5wv7

Uncontrolled resource consumption in CAI Content Credentials

Priority MEDIUM 40

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00541 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-400
TI-2026-73682 CVE-2026-100138 · GHSA-gm27-q289-gqx3

Uncontrolled resource consumption in Adobe Content Credentials tools

Priority MEDIUM 40

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00675 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-400
TI-2026-73681 CVE-2026-100137 · GHSA-q2vj-g663-c6wj

Uncontrolled resource consumption in Adobe CAI Content Credentials

Priority MEDIUM 40

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00541 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-400
TI-2026-73680 CVE-2026-100136 · GHSA-h4f4-xvfc-627f

Integer overflow in Adobe CAI Content Credentials causes crashes

Priority MEDIUM 40

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00568 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-190
TI-2026-73679 CVE-2026-100135 · GHSA-f93w-qfr4-65cp

Adobe Content Credentials flaw lets attackers bypass security checks

Priority MEDIUM 40

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
TI-2026-73677 CVE-2026-100124 · GHSA-6jhj-7947-h72c

Input validation flaw in CAI Content Credentials allows bypass

Priority MEDIUM 40

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
TI-2026-73666 CVE-2026-100113 · GHSA-fpx2-8c59-66m6

Input validation flaw in Adobe Content Credentials bypasses security

Priority MEDIUM 40

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
TI-2026-35701 CVE-2026-48295 · GHSA-87gh-gwg6-px6x

CAI Content Credentials | Insufficiently Protected Credentials (CWE-522)

Priority MEDIUM 40

CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00834 Published 2026-07-14 Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-522
TI-2026-15864 CVE-2026-19480 · GHSA-4jwf-g86p-2g87

CAI Content Credentials | Improper Input Validation (CWE-20)

Priority MEDIUM 40

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00786 Published 2026-09-22 Fixed in c2pa-v0.90.17, c2patool-v0.27.17 CWE-20
TI-2026-73740 CVE-2026-95633 · GHSA-6ch8-vmf7-6q8j

Signature verification flaw in Adobe Content Credentials tools

Priority LOW 39

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00334 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-347
TI-2026-73739 CVE-2026-95632 · GHSA-x6r6-vg44-phx6

Improper signature verification in Adobe CAI Content Credentials

Priority LOW 39

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00456 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-347
Load more
Open these records in search →