CyberSecBulletin

Adobe vulnerabilities

We track 1,726 vulnerabilities in Adobe products across 60+ products. 1,723 are rated high or critical, and 83 have been exploited in real attacks. The most recent was published on November 10, 2026.

1,726vulnerabilities
218critical
1,505high
83exploited
8.1average CVSS score

Latest Adobe vulnerabilities

  • 7.8 High severity

    Substance3D - Stager: Use After Free

    CVE-2026-27277Adobe

    Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a m

  • 7.8 High severity

    Substance3D - Stager: Use After Free

    CVE-2026-27276Adobe

    Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a m

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Write

    CVE-2026-27275Adobe

    Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Write

    CVE-2026-27274Adobe

    Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Write

    CVE-2026-27273Adobe

    Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op

  • 7.8 High severity

    Premiere: Out-of-bounds Read

    CVE-2026-27269Adobe

    Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in

  • 7.8 High severity

    Lightroom Desktop: Out-of-bounds Write

    CVE-2026-21349Adobe

    Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a

  • 7.8 High severity

    Adobe DNG Software Development Kit (SDK): Integer Overflow or Wraparound

    CVE-2026-21353Adobe

    DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must

  • 7.8 High severity

    Adobe DNG Software Development Kit (SDK): Out-of-bounds Write

    CVE-2026-21352Adobe

    DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal

  • 7.8 High severity

    Bridge: Integer Overflow or Wraparound

    CVE-2026-21347Adobe

    Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim m

  • 7.8 High severity

    Bridge: Out-of-bounds Write

    CVE-2026-21346Adobe

    Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Read

    CVE-2026-21345Adobe

    Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execut

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Read

    CVE-2026-21344Adobe

    Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execut

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Read

    CVE-2026-21343Adobe

    Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execut

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Write

    CVE-2026-21342Adobe

    Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Write

    CVE-2026-21341Adobe

    Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op

  • 7.8 High severity

    InDesign Desktop: Out-of-bounds Write

    CVE-2026-21357Adobe

    InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi

  • 7.8 High severity

    After Effects: Use After Free

    CVE-2026-21351Adobe

    After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious

  • 7.8 High severity

    Adobe Substance 3D Designer: Out-of-bounds Write

    CVE-2026-21335Adobe

    Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must

  • 7.8 High severity

    Adobe Substance 3D Designer: Out-of-bounds Write

    CVE-2026-21334Adobe

    Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must

  • 7.8 High severity

    After Effects: Access of Resource Using Incompatible Type

    CVE-2026-21330Adobe

    After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in

  • 7.8 High severity

    After Effects: Use After Free

    CVE-2026-21329Adobe

    After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious

  • 7.8 High severity

    After Effects: Out-of-bounds Write

    CVE-2026-21328Adobe

    After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal

  • 7.8 High severity

    After Effects: Out-of-bounds Write

    CVE-2026-21327Adobe

    After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal

  • 7.8 High severity

    After Effects: Use After Free

    CVE-2026-21326Adobe

    After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious

  • 7.8 High severity

    After Effects: Out-of-bounds Read

    CVE-2026-21325Adobe

    After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code i

  • 7.8 High severity

    After Effects: Out-of-bounds Read

    CVE-2026-21324Adobe

    After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code i

  • 7.8 High severity

    After Effects: Use After Free

    CVE-2026-21323Adobe

    After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious

  • 7.8 High severity

    After Effects: Out-of-bounds Read

    CVE-2026-21322Adobe

    After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code i

  • 7.8 High severity

    After Effects: Integer Overflow or Wraparound

    CVE-2026-21321Adobe

    After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must

  • 7.8 High severity

    After Effects: Use After Free

    CVE-2026-21320Adobe

    After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious

  • 7.8 High severity

    After Effects: Out-of-bounds Write

    CVE-2026-21318Adobe

    After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal

  • 7.8 High severity

    Audition: Out-of-bounds Write

    CVE-2026-21312Adobe

    Audition versions 25.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a maliciou

  • 7.8 High severity

    Substance3D - Modeler: Out-of-bounds Write

    CVE-2026-21299Adobe

    Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must

  • 7.8 High severity

    Substance3D - Modeler: Out-of-bounds Write

    CVE-2026-21298Adobe

    Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must

  • 7.8 High severity

    Adobe Substance 3D Designer: Out-of-bounds Write

    CVE-2026-21307Adobe

    Substance3D - Designer versions 15.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must

  • 7.8 High severity

    Adobe Substance 3D Sampler: Out-of-bounds Write

    CVE-2026-21306Adobe

    Substance3D - Sampler versions 5.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o

  • 7.8 High severity

    Substance3D - Painter: Out-of-bounds Write

    CVE-2026-21305Adobe

    Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must

  • 7.8 High severity

    Substance3D - Stager: Use After Free

    CVE-2026-21287Adobe

    Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a m

  • 7.8 High severity

    InDesign Desktop: Out-of-bounds Write

    CVE-2026-21304Adobe

    InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi