Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV
TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability Priority CRITICAL 98KEV 2026-09-24TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Priority CRITICAL 100KEV 2026-09-08TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-07-07TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-05-20TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability Priority CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records
Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

11 records in Connect Desktop Application · all components

TI-2025-20060 CVE-2025-27203 · GHSA-w9pg-9w7m-8c66

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Priority MEDIUM 45

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01203 Published 2025-07-08 No fix listed CWE-502
TI-2026-26903 CVE-2026-34659 · GHSA-6cgj-r9r8-5xrr

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Priority MEDIUM 44

Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00635 Published 2026-05-12 Fixed in 12.11.1, 2026.3.125 (Win) +1 CWE-502
TI-2026-21730 CVE-2026-27303 · GHSA-p85r-hffw-65q4

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Priority MEDIUM 44

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00613 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-502
TI-2026-26861 CVE-2026-34615 · GHSA-577g-xxrf-8j42

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Priority MEDIUM 43

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00629 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-502
TI-2026-26904 CVE-2026-34660 · GHSA-2r54-572f-5p47

Adobe Connect | Incorrect Authorization (CWE-863)

Priority MEDIUM 42

Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00436 Published 2026-05-12 Fixed in 12.11.1, 2026.3.125 (Win) +1 CWE-863
TI-2026-21678 CVE-2026-27246 · GHSA-4c2f-hvf5-4jwv

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Priority MEDIUM 42

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00304 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2026-21677 CVE-2026-27245 · GHSA-px9p-mm95-78ww

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Priority MEDIUM 42

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00304 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2026-21675 CVE-2026-27243 · GHSA-fm65-7j3c-jcv3

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Priority MEDIUM 42

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00304 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2026-26863 CVE-2026-34617 · GHSA-2xf6-9qjq-vwwm

Adobe Connect | Cross-site Scripting (XSS) (CWE-79)

Priority MEDIUM 40

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could result in privilege escalation.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00417 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2026-26860 CVE-2026-34614 · GHSA-r4vr-qmwh-6j6q

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Priority LOW 27

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0024 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2026-17235 CVE-2026-21331 · GHSA-vhf9-597v-53mq

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Priority LOW 27

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
Open these records in search →