Vulnerabilidades de Adobe
CVEs publicadas que afetam produtos de Adobe: 1285 registro(s), com severidade, exploração e correções.
Adobe Experience Manager 333Adobe Experience Manager 6.5 248Adobe Experience Manager 6.5 LTS 235Adobe Experience Manager as a Cloud Service 218Coldfusion 112ColdFusion 2025 96ColdFusion 2023 96Content Credentials Rust SDK 94C2pa 94Acrobat 88Commerce 83Commerce B2b 81Content Credentials JS SDK 81C2pa-web 81Magento Open Source 75Acrobat Reader DC 73Acrobat DC 73Magento 72C2PA Tool 72Acrobat Reader 66Acrobat 2024 60Substance 3d Stager 38Campaign 36Adobe Campaign Classic 36Flash Player 36Bridge 36InDesign Desktop 35Content Credentials Command-Line Tool 34Indesign 33Substance 3d Designer 32Photoshop 28Illustrator 27Illustrator Desktop 2026 23Illustrator Desktop 2025 23Connect 22Substance 3d Sampler 21After Effects 21Substance 3d Painter 21Dng Software Development Kit 19Adobe DNG Software Development Kit (SDK) 14
CVE-2026-81978
Média · 5.5
CWE-125 08/09/2026
Acrobat Reader | Out-of-bounds Read (CWE-125)
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-81977
Média · 5.5
CWE-191 08/09/2026
Acrobat Reader | Integer Underflow (Wrap or Wraparound) (CWE-191)
Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-81976
Alta · 7.8
CWE-416 08/09/2026
Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-81975
Alta · 7.8
CWE-416 08/09/2026
Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-81973
Alta · 7.8
CWE-416 08/09/2026
Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-80162
Média · 5.5
CWE-416 08/09/2026
Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-80161
Alta · 7.8
CWE-843 08/09/2026
Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)
Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-80160
Média · 5.5
CWE-125 08/09/2026
Acrobat Reader | Out-of-bounds Read (CWE-125)
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-80159
Média · 4.0
CWE-426 08/09/2026
Acrobat Reader | Untrusted Search Path (CWE-426)
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-79910
Média · 5.5
CWE-125 08/09/2026
Acrobat Reader | Out-of-bounds Read (CWE-125)
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-79909
Alta · 7.8
CWE-416 08/09/2026
Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-79908
Alta · 7.8
CWE-787 08/09/2026
Acrobat Reader | Out-of-bounds Write (CWE-787)
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-79907
Alta · 7.8
CWE-415 08/09/2026
Acrobat Reader | Double Free (CWE-415)
Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-82007
Alta · 7.8
CWE-190 08/09/2026
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-82006
Alta · 7.8
CWE-122 08/09/2026
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-82005
Alta · 7.8
CWE-787 08/09/2026
Photoshop Desktop | Out-of-bounds Write (CWE-787)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-79905
Média · 5.4
CWE-79 08/09/2026
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
CVE-2026-76199
Alta · 8.6
CWE-427 08/09/2026
Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVE-2026-76190
Alta · 8.6
CWE-95 08/09/2026
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-76002
Média · 6.1
CWE-79 08/09/2026
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.
CVE-2026-76000
Média · 6.5
CWE-400 08/09/2026
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-75999
Alta · 8.4
CWE-20 08/09/2026
ColdFusion | Improper Input Validation (CWE-20)
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVE-2026-75998
Alta · 7.5
CWE-284 08/09/2026
ColdFusion | Improper Access Control (CWE-284)
ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction.
CVE-2026-75993
Alta · 8.5
CWE-79 08/09/2026
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVE-2026-75992
Alta · 7.8
CWE-787 08/09/2026
Illustrator | Out-of-bounds Write (CWE-787)
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.