Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8047 records

Priority LOW 27

Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00218 Published 2026-10-29 Fixed in 1.2 (4613) CWE-22
Priority MEDIUM 45

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.013 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-78
Priority MEDIUM 43

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0049 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-863
Priority MEDIUM 43

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the curren…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00476 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-89
Priority MEDIUM 43

Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00605 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-79
Priority MEDIUM 49

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the curren…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00518 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-89
Priority MEDIUM 44

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00573 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-94
Priority MEDIUM 42

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the curren…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00496 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-89
Priority LOW 39

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00295 Published 2026-10-27 Fixed in 7.4.4 build 9403 CWE-89
Priority MEDIUM 43

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0045 Published 2026-10-27 Fixed in 2026.9.61 (Win), 2026.10.66 (Mac Silicon) +2 CWE-94
Priority LOW 35

Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00187 Published 2026-10-27 Fixed in 12.2.0 CWE-121
Priority LOW 33

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00156 Published 2026-10-27 Fixed in 6.11.0.478.6 CWE-427
Priority MEDIUM 41

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00793 Published 2026-10-20 Fixed in 154.0.4258.48 CWE-787
Priority LOW 20

Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00437 Published 2026-10-20 Fixed in 154.0.4258.48 CWE-125
Priority LOW 39

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00494 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
Priority LOW 30

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00404 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
Priority MEDIUM 40

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00568 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-190
Priority LOW 26

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00199 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-295
Priority MEDIUM 40

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00541 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-400
Priority MEDIUM 40

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00541 Published 2026-10-13 Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-400
Load more