AD
Vendor
Adobe
16,223
CVEs
207
On KEV
483
New 30D
Products
AE10.0
Adobe Experience Manager 6.5
Adobe
213 CVEs0 on KEV35 new
CO10.0
ColdFusion
App Server
296 CVEs17 on KEV30 new
C210.0
ColdFusion 2023
Adobe
89 CVEs1 on KEV31 new
C210.0
ColdFusion 2025
Adobe
89 CVEs1 on KEV31 new
C28.6
C2pa
Adobe
94 CVEs0 on KEV32 new
CC8.6
Content Credentials Rust SDK
Adobe
94 CVEs0 on KEV32 new
C28.6
C2pa-web
Adobe
81 CVEs0 on KEV32 new
CC8.6
Content Credentials JS SDK
Adobe
81 CVEs0 on KEV32 new
C28.6
C2patool
Adobe
72 CVEs0 on KEV32 new
CT8.6
C2PA Tool
Adobe
38 CVEs0 on KEV32 new
AE10.0
Adobe Experience Manager 6.5 LTS
Adobe
200 CVEs0 on KEV22 new
PH9.8
Photoshop
Adobe
118 CVEs0 on KEV18 new
CO10.0
Commerce
E-commerce
251 CVEs6 on KEV11 new
AC10.0
Adobe Commerce B2B
Adobe
56 CVEs3 on KEV11 new
AS7.8
Adobe Substance 3D Stager
Adobe
16 CVEs0 on KEV16 new
S37.8
Substance 3d Stager
Adobe
100 CVEs0 on KEV13 new
AE10.0
Adobe Experience Manager as a Cloud Service
Adobe
183 CVEs0 on KEV8 new
AC10.0
Adobe Campaign Classic
Adobe
44 CVEs0 on KEV8 new
AF7.8
Adobe FrameMaker 2022
Adobe
10 CVEs0 on KEV10 new
AF7.8
Adobe FrameMaker 2026
Adobe
10 CVEs0 on KEV10 new
S37.8
Substance 3D Designer
Adobe
61 CVEs0 on KEV9 new
EM9.9
Experience Manager
Adobe
1,272 CVEs0 on KEV6 new
AD8.6
Adobe Dimension
Adobe
7 CVEs0 on KEV7 new
CB10.0
Commerce B2b
Adobe
141 CVEs4 on KEV0 new
CA10.0
Commerce and Magento
Adobe
4 CVEs4 on KEV0 new
AC9.3
Adobe Commerce Events
Adobe
14 CVEs1 on KEV0 new
IE9.3
I/o Events
Adobe
14 CVEs1 on KEV0 new
S37.8
Substance 3D Sampler
Adobe
44 CVEs0 on KEV4 new
AB8.6
Adobe Bridge
Adobe
25 CVEs0 on KEV4 new
FP10.0
Flash Player
Adobe
1,084 CVEs36 on KEV0 new
AC10.0
Acrobat
Adobe
1,415 CVEs25 on KEV0 new
AR10.0
Acrobat Reader
Adobe
1,117 CVEs21 on KEV0 new
CC9.8
Creative Cloud Desktop Application
Adobe
17 CVEs0 on KEV1 new
AC9.9
Adobe Connect Android Mobile App
Adobe
10 CVEs0 on KEV1 new
AC9.6
Adobe Connect Desktop App
Adobe
1 CVEs0 on KEV1 new
AF8.8
Acrobat for Edge
Adobe
2 CVEs0 on KEV2 new
AS7.8
Adobe Substance 3D Painter
Adobe
2 CVEs0 on KEV2 new
AA8.8
Acrobat and Reader
Adobe
13 CVEs13 on KEV0 new
AI10.0
Air
Adobe
415 CVEs8 on KEV0 new
FP9.8
Flash Player Desktop Runtime
Adobe
294 CVEs8 on KEV0 new
RA9.8
Reader and Acrobat
Adobe
8 CVEs8 on KEV0 new
AD10.0
Acrobat DC
Adobe
1,838 CVEs7 on KEV0 new
AR10.0
Acrobat Reader DC
Adobe
1,838 CVEs7 on KEV0 new
AS10.0
Air Sdk
Adobe
410 CVEs6 on KEV0 new
AS10.0
Air Sdk & Compiler
Adobe
365 CVEs5 on KEV0 new
AD9.8
Air Desktop Runtime
Adobe
88 CVEs3 on KEV0 new
RE10.0
Reader
Adobe
361 CVEs2 on KEV0 new
AA8.8
Adobe Air
Adobe
146 CVEs2 on KEV0 new
CA9.8
Commerce and Magento Open Source
Adobe
2 CVEs2 on KEV0 new
FP8.8
Flash Player and AIR
Adobe
2 CVEs2 on KEV0 new
AA8.8
Adobe Air Sdk
Adobe
96 CVEs1 on KEV0 new
A28.8
Acrobat 2024
Adobe
55 CVEs1 on KEV0 new
CW9.8
Commerce Webhooks
Adobe
10 CVEs1 on KEV0 new
EM10.0
Experience Manager Forms
Adobe
8 CVEs1 on KEV0 new
LI6.5
Livecycle
Adobe
5 CVEs1 on KEV0 new
LD6.5
Livecycle Data Services
Adobe
5 CVEs1 on KEV0 new
MC9.8
Magento Commerce
Adobe
5 CVEs1 on KEV0 new
AA9.8
Adobe Acrobat and Reader
Adobe
3 CVEs1 on KEV0 new
AE10.0
Adobe Experience Manager
Adobe
3 CVEs1 on KEV0 new
BL6.5
BlazeDS
Adobe
3 CVEs1 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104353 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) |
| CVE-2026-105780 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) |
| CVE-2026-105489 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-104350 New | AC Adobe Campaign Classic Adobe | 9.3 | Oct 27 | Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79) |
| CVE-2026-105781 New | AC Adobe Campaign Classic Adobe | 10.0 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-104351 New | AC Adobe Campaign Classic Adobe | 9.9 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) |
| CVE-2026-104354 New | AC Adobe Campaign Classic Adobe | 9.1 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-105779 New | AC Adobe Campaign Classic Adobe | 9.1 | Oct 27 | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
| CVE-2026-48360 New | AC Adobe Connect Android Mobile App Adobe | 9.6 | Oct 27 | Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94) |
| CVE-2026-48380 New | AS Adobe Substance 3D Painter Adobe | 5.5 | Oct 27 | Substance3D - Painter | Out-of-bounds Read (CWE-125) |
| CVE-2026-48379 New | AS Adobe Substance 3D Painter Adobe | 7.8 | Oct 27 | Substance3D - Painter | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-104349 New | CC Creative Cloud Desktop Application Adobe | 7.3 | Oct 27 | Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427) |
| CVE-2026-100134 | AF Acrobat for Edge Adobe | 8.8 | Oct 20 | Acrobat for Edge | Out-of-bounds Write (CWE-787) |
| CVE-2026-100132 | AF Acrobat for Edge Adobe | 4.3 | Oct 20 | Acrobat for Edge | Out-of-bounds Read (CWE-125) |
| CVE-2026-100119 | CC Content Credentials JS SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-102501 | CC Content Credentials Rust SDK Adobe | 5.3 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100114 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Access Control (CWE-284) |
| CVE-2026-100136 | CC Content Credentials JS SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) |
| CVE-2026-103294 | CC Content Credentials JS SDK Adobe | 5.9 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-100139 | CC Content Credentials JS SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-104345 | CC Content Credentials Rust SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-105902 | CC Content Credentials JS SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-103297 | CC Content Credentials Rust SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) |
| CVE-2026-103296 | CC Content Credentials JS SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) |
| CVE-2026-100116 | CC Content Credentials Rust SDK Adobe | 5.9 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-100123 | CC Content Credentials JS SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-48378 | CC Content Credentials Rust SDK Adobe | 5.3 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-95633 | CC Content Credentials JS SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) |
| CVE-2026-100122 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-102502 | CC Content Credentials Rust SDK Adobe | 5.3 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) |
| CVE-2026-100121 | CC Content Credentials JS SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-100120 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-95634 | CC Content Credentials JS SDK Adobe | 8.6 | Oct 13 | CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-100115 | CC Content Credentials Rust SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Access Control (CWE-284) |
| CVE-2026-100137 | CC Content Credentials JS SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-100117 | CC Content Credentials Rust SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100135 | CC Content Credentials Rust SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100118 | CC Content Credentials JS SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-100113 | CC Content Credentials Rust SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100124 | CC Content Credentials Rust SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-106627 | CC Content Credentials Rust SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-95632 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) |
| CVE-2026-100125 | CC Content Credentials Rust SDK Adobe | 5.9 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100138 | CC Content Credentials Rust SDK Adobe | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-48377 | CT C2PA Tool Adobe | 5.3 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-103820 | CT C2PA Tool Adobe | 5.5 | Oct 13 | CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) |
| CVE-2026-100128 | AB Adobe Bridge Adobe | 7.8 | Oct 13 | Bridge | Out-of-bounds Write (CWE-787) |
| CVE-2026-100129 | AB Adobe Bridge Adobe | 7.8 | Oct 13 | Bridge | Out-of-bounds Write (CWE-787) |
| CVE-2026-100126 | AB Adobe Bridge Adobe | 5.5 | Oct 13 | Bridge | Out-of-bounds Read (CWE-125) |
| CVE-2026-100127 | AB Adobe Bridge Adobe | 7.8 | Oct 13 | Bridge | Out-of-bounds Write (CWE-787) |
| CVE-2026-103822 | S3 Substance 3D Designer Adobe | 5.5 | Oct 13 | Substance3D - Designer | Out-of-bounds Read (CWE-125) |
| CVE-2026-103825 | S3 Substance 3D Designer Adobe | 5.5 | Oct 13 | Substance3D - Designer | Out-of-bounds Read (CWE-125) |
| CVE-2026-103823 | S3 Substance 3D Designer Adobe | 5.5 | Oct 13 | Substance3D - Designer | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-103824 | S3 Substance 3D Designer Adobe | 5.5 | Oct 13 | Substance3D - Designer | NULL Pointer Dereference (CWE-476) |
| CVE-2026-103826 | S3 Substance 3D Designer Adobe | 5.5 | Oct 13 | Substance3D - Designer | NULL Pointer Dereference (CWE-476) |
| CVE-2026-103827 | S3 Substance 3D Designer Adobe | 5.5 | Oct 13 | Substance3D - Designer | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-103828 | S3 Substance 3D Designer Adobe | 5.5 | Oct 13 | Substance3D - Designer | NULL Pointer Dereference (CWE-476) |
| CVE-2026-103821 | S3 Substance 3D Designer Adobe | 7.8 | Oct 13 | Substance3D - Designer | Out-of-bounds Write (CWE-787) |
| CVE-2026-103829 | S3 Substance 3D Designer Adobe | 5.5 | Oct 13 | Substance3D - Designer | NULL Pointer Dereference (CWE-476) |
| CVE-2026-83966 | S3 Substance 3D Sampler Adobe | 7.8 | Oct 13 | Substance3D - Sampler | Out-of-bounds Write (CWE-787) |