CyberSecBulletin

Adobe vulnerabilities

We track 1,726 vulnerabilities in Adobe products across 60+ products. 1,723 are rated high or critical, and 83 have been exploited in real attacks. The most recent was published on November 10, 2026.

1,726vulnerabilities
218critical
1,505high
83exploited
8.1average CVSS score

Latest Adobe vulnerabilities

  • 8.8 High severity

    Acrobat for Edge: Out-of-bounds Write

    CVE-2026-100134Adobe

    Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 8.6 High severity

    Content Credentials Rust SDK: Server-Side Request Forgery

    CVE-2026-95634Adobe

    CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

  • 7.5 High severity

    Content Credentials Rust SDK: Improper Verification of Cryptographic Signature

    CVE-2026-95633Adobe

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write acces

  • 7.5 High severity

    Content Credentials Rust SDK: Improper Verification of Cryptographic Signature

    CVE-2026-95632Adobe

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write acces

  • 7.5 High severity

    Content Credentials Rust SDK: Uncontrolled Resource Consumption

    CVE-2026-106627Adobe

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service

  • 7.5 High severity

    Content Credentials Rust SDK: Uncontrolled Resource Consumption

    CVE-2026-105902Adobe

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service

  • 7.5 High severity

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…

    CVE-2026-104345Adobe

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this

  • 7.5 High severity

    Content Credentials Rust SDK: Improper Verification of Cryptographic Signature

    CVE-2026-103297Adobe

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write acces

  • 7.5 High severity

    Content Credentials Rust SDK: Improper Verification of Cryptographic Signature

    CVE-2026-103296Adobe

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write acces

  • 7.5 High severity

    Content Credentials Rust SDK: Uncontrolled Resource Consumption

    CVE-2026-100139Adobe

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service

  • 7.5 High severity

    Content Credentials Rust SDK: Uncontrolled Resource Consumption

    CVE-2026-100138Adobe

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service

  • 7.5 High severity

    Content Credentials Rust SDK: Uncontrolled Resource Consumption

    CVE-2026-100137Adobe

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service

  • 7.5 High severity

    Content Credentials Rust SDK: Integer Overflow or Wraparound

    CVE-2026-100136Adobe

    CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Explo

  • 7.5 High severity

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…

    CVE-2026-100135Adobe

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this

  • 7.5 High severity

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…

    CVE-2026-100124Adobe

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this

  • 7.5 High severity

    Content Credentials Rust SDK: Improper Certificate Validation

    CVE-2026-100123Adobe

    CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation o

  • 7.5 High severity

    Content Credentials Rust SDK: Improper Certificate Validation

    CVE-2026-100122Adobe

    CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation o

  • 7.5 High severity

    Content Credentials Rust SDK: Improper Certificate Validation

    CVE-2026-100121Adobe

    CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation o

  • 7.5 High severity

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…

    CVE-2026-100120Adobe

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this

  • 7.5 High severity

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…

    CVE-2026-100119Adobe

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this

  • 7.5 High severity

    Content Credentials Rust SDK: Improper Certificate Validation

    CVE-2026-100118Adobe

    CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation o

  • 7.5 High severity

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…

    CVE-2026-100117Adobe

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this

  • 7.5 High severity

    Content Credentials Rust SDK: Improper Access Control

    CVE-2026-100115Adobe

    CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this i

  • 7.5 High severity

    Content Credentials Rust SDK: Improper Access Control

    CVE-2026-100114Adobe

    CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this i

  • 7.5 High severity

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…

    CVE-2026-100113Adobe

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this

  • 7.8 High severity

    Photoshop: Out-of-bounds Write

    CVE-2026-97312Adobe

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 7.8 High severity

    Photoshop: Out-of-bounds Write

    CVE-2026-96523Adobe

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 7.8 High severity

    Photoshop: Out-of-bounds Write

    CVE-2026-96522Adobe

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 7.8 High severity

    Photoshop: Out-of-bounds Write

    CVE-2026-96521Adobe

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 7.8 High severity

    Photoshop: Out-of-bounds Write

    CVE-2026-95641Adobe

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 8.6 High severity

    Photoshop: Incorrect Authorization

    CVE-2026-95639Adobe

    Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requi

  • 7.8 High severity

    Photoshop: Heap-based Buffer Overflow

    CVE-2026-95638Adobe

    Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 7.8 High severity

    Photoshop: Out-of-bounds Write

    CVE-2026-95637Adobe

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 7.8 High severity

    Photoshop: Integer Overflow or Wraparound

    CVE-2026-95636Adobe

    Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 7.8 High severity

    Photoshop: Double Free

    CVE-2026-95635Adobe

    Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user inte

  • 9.3 Critical severity

    ColdFusion 2025: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-90530Adobe

    ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories

  • 7.8 High severity

    Substance 3D Sampler: Out-of-bounds Write

    CVE-2026-83966Adobe

    Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 7.8 High severity

    Substance 3D Sampler: Stack-based Buffer Overflow

    CVE-2026-83965Adobe

    Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 7.8 High severity

    Photoshop: Integer Overflow or Wraparound

    CVE-2026-83661Adobe

    Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • 7.1 High severity

    ColdFusion 2025: Server-Side Request Forgery

    CVE-2026-76001Adobe

    ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploit depends on conditions beyo