CVEs we hold for Adobe
Records whose assigning authority named Adobe as the affected vendor. Newest identifiers first, capped at 200.
Announced together
50 groups of these records were each published under a single advisory. Each page names its advisory, counts what that group offers, and says what it does not cover.
apsb25-48 · 226 recordsapsb24-28 · 108 recordsapsb18-21 · 105 recordsapsb23-72 · 98 recordsapsb25-115 · 97 recordsapsb18-30 · 87 recordsapsb18-41 · 86 recordsapsb19-41 · 83 recordsapsb19-18 · 82 recordsapsb23-72 · 79 recordsapsb26-98 · 72 recordsapsb19-07 · 70 records
38 more are in the sitemap; these are the largest.
Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.
CVE-2026-95634CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Content Credentials JS SDK
CVE-2026-95633CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials JS SDK
CVE-2026-95632CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials JS SDK
CVE-2026-90532Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe Experience Manager 6.5
CVE-2026-90531Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe Experience Manager 6.5
CVE-2026-90530ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusion 2023
CVE-2026-89277CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)Adobe Content Credentials Command-Line Tool
CVE-2026-89276Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Campaign Classic
CVE-2026-89275Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Campaign Classic
CVE-2026-84412Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Campaign Classic
CVE-2026-84397Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-83965Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)Adobe Substance 3D Sampler
CVE-2026-83964Adobe Connect | Improper Certificate Validation (CWE-295)Adobe Connect Android Mobile App
CVE-2026-83962Substance3D - Modeler | Stack-based Buffer Overflow (CWE-121)Adobe Substance3D - Modeler
CVE-2026-83960Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-83959Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)Adobe Substance 3D Sampler
CVE-2026-83958Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-83662Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-83660Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Campaign Classic
CVE-2026-82443Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Campaign Classic
CVE-2026-82013Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Campaign Classic
CVE-2026-82011Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…Adobe Campaign Classic
CVE-2026-82010Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…Adobe Campaign Classic
CVE-2026-82009Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…Adobe Campaign Classic
CVE-2026-82008Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)Adobe Campaign Classic
CVE-2026-82004Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command…Adobe Campaign Classic
CVE-2026-82003Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)Adobe Campaign Classic
CVE-2026-82000Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)Adobe AEM 6.5 LTS Forms JEE
CVE-2026-81999Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)Adobe AEM 6.5 LTS Forms JEE
CVE-2026-81995Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)Adobe AEM 6.5 LTS Forms JEE
CVE-2026-81994Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)Adobe Acrobat 2024
CVE-2026-80161Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)Adobe Acrobat 2024
CVE-2026-79905Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-79904Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Photoshop Android
CVE-2026-77110Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Magento Open Source
CVE-2026-76198CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK
CVE-2026-76197Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command…Adobe Campaign Classic
CVE-2026-76195Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command…Adobe Campaign Classic
CVE-2026-76194CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Command-Line Tool
CVE-2026-76193Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Campaign Classic
CVE-2026-76191Animate | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Animate 2024
CVE-2026-76190ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)Adobe ColdFusion 2023
CVE-2026-76189CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Content Credentials Rust SDK
CVE-2026-75769Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Painter
CVE-2026-75767Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Painter
CVE-2026-75766Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Painter
CVE-2026-75750Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Painter
CVE-2026-75746ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe ColdFusion 2023
CVE-2026-75745Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)Adobe AEM 6.5 LTS Forms JEE
CVE-2026-75744Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)Adobe AEM 6.5 LTS Forms JEE
CVE-2026-75743Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)Adobe AEM 6.5 LTS Forms JEE
CVE-2026-75742Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75741Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75740Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75739Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75738Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75737Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75736Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75735Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75734Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75733Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75732Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe Experience Manager 6.5
CVE-2026-75731Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75730Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75729Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75728Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)Adobe Campaign Classic
CVE-2026-75727Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75726Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager 6.5
CVE-2026-75725Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75724Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75723Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)Adobe Campaign Classic
CVE-2026-75722Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75721Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Campaign Classic
CVE-2026-75720Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75719Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75718Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75717Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75716Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75715Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75714Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75713Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75712Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75711Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75710Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75709Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75708Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75707Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75706Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75705Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75704Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75703Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Campaign Classic
CVE-2026-75702Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75701Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75700Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75699Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Campaign Classic
CVE-2026-75698Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Connect Android Mobile App
CVE-2026-75697Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect Android Mobile App
CVE-2026-75696Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75695Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75694Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75693Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75692Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75691Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75690Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75689Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect Android Mobile App
CVE-2026-75687Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75685Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager 6.5
CVE-2026-75684Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect Android Mobile App
200 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.