Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Adobe — Vulnerabilities & Security Advisories 4289

Browse all 4289 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top 10 Products Adobe:Adobe Experience ManagerAdobe Acrobat and ReaderAcrobat ReaderAdobe CommerceIllustratorInDesign DesktopColdFusionDimensionBridgeAfter EffectsAnimateExperience ManagerSubstance3D - StagerMagento CommerceAdobe FramemakerSubstance3D - PainterInDesignInCopyPhotoshopMedia EncoderSubstance3D - ModelerAdobe Photoshop CCSubstance3D - DesignerAdobe ConnectAuditionFrameMakerMagentoAdobe PhotoshopPhotoshop DesktopSubstance3D - Sampler
CVE IDTitleCVSSSeverityPaused
CVE-2026-34623 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience ManagerCWE-79 5.4 Medium2026-04-14
CVE-2026-34624 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience ManagerCWE-79 5.4 Medium2026-04-14
CVE-2026-27288 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience ManagerCWE-79 5.4 Medium2026-04-14
CVE-2026-27303 Adobe Connect | Deserialization of Untrusted Data (CWE-502) — Adobe ConnectCWE-502 9.6 Critical2026-04-14
CVE-2026-34617 Adobe Connect | Cross-site Scripting (XSS) (CWE-79) — Adobe ConnectCWE-79 8.7 High2026-04-14
CVE-2026-21331 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) — Adobe ConnectCWE-79 6.1 Medium2026-04-14
CVE-2026-27246 Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe ConnectCWE-79 9.3 Critical2026-04-14
CVE-2026-34614 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) — Adobe ConnectCWE-79 6.1 Medium2026-04-14
CVE-2026-27245 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) — Adobe ConnectCWE-79 9.3 Critical2026-04-14
CVE-2026-34615 Adobe Connect | Deserialization of Untrusted Data (CWE-502) — Adobe ConnectCWE-502 9.3 Critical2026-04-14
CVE-2026-27243 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) — Adobe ConnectCWE-79 9.3 Critical2026-04-14
CVE-2026-34628 InDesign Desktop | Heap-based Buffer Overflow (CWE-122) — InDesign DesktopCWE-122 7.8 High2026-04-14
CVE-2026-34629 InDesign Desktop | Heap-based Buffer Overflow (CWE-122) — InDesign DesktopCWE-122 7.8 High2026-04-14
CVE-2026-34627 InDesign Desktop | Heap-based Buffer Overflow (CWE-122) — InDesign DesktopCWE-122 7.8 High2026-04-14
CVE-2026-27258 DNG SDK | Out-of-bounds Write (CWE-787) — DNG SDKCWE-787 5.5 Medium2026-04-14
CVE-2026-27284 InDesign Desktop | Out-of-bounds Read (CWE-125) — InDesign DesktopCWE-125 7.8 High2026-04-14
CVE-2026-27285 InDesign Desktop | Heap-based Buffer Overflow (CWE-122) — InDesign DesktopCWE-122 5.5 Medium2026-04-14
CVE-2026-27286 InDesign Desktop | Heap-based Buffer Overflow (CWE-122) — InDesign DesktopCWE-122 5.5 Medium2026-04-14
CVE-2026-27283 InDesign Desktop | Use After Free (CWE-416) — InDesign DesktopCWE-416 7.8 High2026-04-14
CVE-2026-27238 InDesign Desktop | Heap-based Buffer Overflow (CWE-122) — InDesign DesktopCWE-122 7.8 High2026-04-14
CVE-2026-27291 InDesign Desktop | Out-of-bounds Write (CWE-787) — InDesign DesktopCWE-787 7.8 High2026-04-14
CVE-2026-34622 Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) — Acrobat ReaderCWE-1321 8.6 High2026-04-14
CVE-2026-34626 Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) — Acrobat ReaderCWE-1321 6.3 Medium2026-04-14
CVE-2026-34621 Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) — Acrobat ReaderCWE-1321 8.6 High2026-04-11
CVE-2026-27309 Substance3D - Stager | Use After Free (CWE-416) — Substance3D - StagerCWE-416 7.8 High2026-03-27
CVE-2026-21291 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 4.8 Medium2026-03-11
CVE-2026-21293 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) — Adobe CommerceCWE-918 5.5 Medium2026-03-11
CVE-2026-21282 Adobe Commerce | Improper Input Validation (CWE-20) — Adobe CommerceCWE-20 5.3 Medium2026-03-11
CVE-2026-21286 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 5.3 Medium2026-03-11
CVE-2026-21294 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) — Adobe CommerceCWE-918 5.5 Medium2026-03-11

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.