Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Adobe Component: Connect Desktop Application Clear all filters
TI-2026-26903 CVE-2026-34659 · GHSA-6cgj-r9r8-5xrr

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Priority MEDIUM 44

Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00635 Published 2026-05-12 Fixed in 12.11.1, 2026.3.125 (Win) +1 CWE-502
TI-2026-26904 CVE-2026-34660 · GHSA-2r54-572f-5p47

Adobe Connect | Incorrect Authorization (CWE-863)

Priority MEDIUM 42

Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00436 Published 2026-05-12 Fixed in 12.11.1, 2026.3.125 (Win) +1 CWE-863
TI-2026-21730 CVE-2026-27303 · GHSA-p85r-hffw-65q4

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Priority MEDIUM 44

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00613 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-502
TI-2026-26863 CVE-2026-34617 · GHSA-2xf6-9qjq-vwwm

Adobe Connect | Cross-site Scripting (XSS) (CWE-79)

Priority MEDIUM 40

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could result in privilege escalation.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00417 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2026-17235 CVE-2026-21331 · GHSA-vhf9-597v-53mq

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Priority LOW 27

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2026-21678 CVE-2026-27246 · GHSA-4c2f-hvf5-4jwv

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Priority MEDIUM 42

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00304 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2026-26860 CVE-2026-34614 · GHSA-r4vr-qmwh-6j6q

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Priority LOW 27

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0024 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2026-21677 CVE-2026-27245 · GHSA-px9p-mm95-78ww

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Priority MEDIUM 42

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00304 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2026-26861 CVE-2026-34615 · GHSA-577g-xxrf-8j42

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Priority MEDIUM 43

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00629 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-502
TI-2026-21675 CVE-2026-27243 · GHSA-fm65-7j3c-jcv3

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Priority MEDIUM 42

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00304 Published 2026-04-14 Fixed in 12.11, 2025.9 CWE-79
TI-2025-20060 CVE-2025-27203 · GHSA-w9pg-9w7m-8c66

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Priority MEDIUM 45

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01203 Published 2025-07-08 No fix listed CWE-502