Vulnerabilidades de Adobe
CVEs publicadas que afetam produtos de Adobe: 1285 registro(s), com severidade, exploração e correções.
Adobe Experience Manager 333Adobe Experience Manager 6.5 248Adobe Experience Manager 6.5 LTS 235Adobe Experience Manager as a Cloud Service 218Coldfusion 99ColdFusion 2025 96ColdFusion 2023 96Content Credentials Rust SDK 94C2pa 94Acrobat 88Commerce 83Commerce B2b 81Content Credentials JS SDK 81C2pa-web 81Magento Open Source 75Acrobat Reader DC 73Acrobat DC 73Magento 72C2PA Tool 72Acrobat Reader 66Acrobat 2024 60Substance 3d Stager 38Campaign 36Adobe Campaign Classic 36Flash Player 36Bridge 36InDesign Desktop 35Content Credentials Command-Line Tool 34Indesign 33Substance 3d Designer 32Photoshop 28Illustrator 27Illustrator Desktop 2026 23Illustrator Desktop 2025 23Connect 22Substance 3d Sampler 21After Effects 21Substance 3d Painter 21Dng Software Development Kit 19Adobe DNG Software Development Kit (SDK) 14
CVE-2026-103836
Alta · 7.8
CWE-787 13/10/2026
Substance3D - Stager | Out-of-bounds Write (CWE-787)
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103835
Alta · 7.8
CWE-787 13/10/2026
Substance3D - Stager | Out-of-bounds Write (CWE-787)
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103834
Alta · 7.8
CWE-787 13/10/2026
Substance3D - Stager | Out-of-bounds Write (CWE-787)
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103833
Alta · 7.8
CWE-787 13/10/2026
Substance3D - Stager | Out-of-bounds Write (CWE-787)
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103832
Alta · 7.8
CWE-787 13/10/2026
Substance3D - Stager | Out-of-bounds Write (CWE-787)
Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103830
Alta · 7.8
CWE-121 13/10/2026
Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)
Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-95631
Alta · 8.7
CWE-20 13/10/2026
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-95630
Média · 4.3
CWE-20 13/10/2026
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
CVE-2026-92922
Alta · 8.1
CWE-79 13/10/2026
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.
CVE-2026-92911
Alta · 8.7
CWE-79 13/10/2026
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.
CVE-2026-92910
Alta · 7.2
CWE-863 13/10/2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-92909
Crítica · 9.8
CWE-863 13/10/2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.
CVE-2026-92908
Alta · 8.3
CWE-863 13/10/2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction.
CVE-2026-92464
Crítica · 9.1
CWE-20 13/10/2026
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-91013
Crítica · 9.3
CWE-79 13/10/2026
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.
CVE-2026-106625
Alta · 7.8
CWE-787 13/10/2026
Adobe Framemaker | Out-of-bounds Write (CWE-787)
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-104344
Alta · 7.8
CWE-122 13/10/2026
Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)
Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-104343
Média · 5.5
CWE-476 13/10/2026
Adobe Framemaker | NULL Pointer Dereference (CWE-476)
Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-104342
Alta · 7.8
CWE-416 13/10/2026
Adobe Framemaker | Use After Free (CWE-416)
Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-104341
Alta · 7.8
CWE-787 13/10/2026
Adobe Framemaker | Out-of-bounds Write (CWE-787)
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-104340
Alta · 7.8
CWE-122 13/10/2026
Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)
Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103967
Alta · 7.8
CWE-787 13/10/2026
Adobe Framemaker | Out-of-bounds Write (CWE-787)
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103966
Alta · 7.8
CWE-122 13/10/2026
Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)
Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103857
Média · 5.5
CWE-125 13/10/2026
Adobe Framemaker | Out-of-bounds Read (CWE-125)
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103856
Média · 5.5
CWE-125 13/10/2026
Adobe Framemaker | Out-of-bounds Read (CWE-125)
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.