Adobe Based in San Jose, best known for creating Photoshop, Acrobat (PDF).

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Adobe product.

RSS Feeds for Adobe security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Adobe products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Adobe Sorted by Most Security Vulnerabilities since 2018

Adobe Experience Manager1268 vulnerabilities
Adobe Experience Manager (AEM), is a comprehensive content management solution for building websites, mobile apps and forms

Adobe Acrobat577 vulnerabilities
Application for working with PDF documents

Adobe Commerce224 vulnerabilities

Adobe ColdFusion224 vulnerabilities
Web application server since 1995. Tag or script based programming language CFML.

Adobe Commerce191 vulnerabilities

Adobe InDesign173 vulnerabilities

Adobe Magento146 vulnerabilities

Adobe Illustrator137 vulnerabilities

Adobe Commerce B2b135 vulnerabilities

Adobe Dimension107 vulnerabilities

Adobe Photoshop101 vulnerabilities
Popular Photo Editing Software

Adobe Bridge99 vulnerabilities

Adobe Magento Open Source96 vulnerabilities

Adobe Substance 3d Painter86 vulnerabilities

Adobe Animate84 vulnerabilities

Adobe Substance 3d Stager84 vulnerabilities

Adobe Framemaker79 vulnerabilities

Adobe After Effects73 vulnerabilities

Adobe Reader66 vulnerabilities

Adobe Connect61 vulnerabilities

Adobe Substance 3d Designer52 vulnerabilities

Adobe Incopy45 vulnerabilities

Adobe Media Encoder43 vulnerabilities

Adobe Substance 3d Sampler41 vulnerabilities

Adobe Substance 3d Modeler37 vulnerabilities

Adobe Audition32 vulnerabilities

Adobe Xmp Toolkit Software Development Kit28 vulnerabilities

Adobe Premiere Pro27 vulnerabilities

Adobe Creative Cloud Desktop Application23 vulnerabilities
The desktop client for Adobe Creative Cloud

Adobe Magento Commerce21 vulnerabilities

Adobe Lightroom17 vulnerabilities

Adobe Experience Manager Screens15 vulnerabilities

Adobe Dreamweaver14 vulnerabilities

Adobe Format Plugins12 vulnerabilities

Adobe Premiere Rush11 vulnerabilities

Adobe Substance 3d Viewer10 vulnerabilities

Adobe Photoshop Elements3 vulnerabilities

Adobe Framemaker Publishing Server2 vulnerabilities

Adobe Robohelp2 vulnerabilities

Adobe Acrobat 20171 vulnerability

Adobe Lifecycle Data Services1 vulnerability

Adobe Acrobat 20201 vulnerability

Adobe Acrobat Reader 20171 vulnerability

Adobe Acrobat Reader 20201 vulnerability

Adobe Aero1 vulnerability

Adobe Air Sdk Compiler1 vulnerability

Adobe Livecycle1 vulnerability

Adobe Pdf Library Sdk1 vulnerability

Adobe Pass1 vulnerability

Recent Adobe Security Advisories

Advisory	Title	Published
APSB26-119	Security updates available for Adobe ColdFusion \| APSB26-119	September 8, 2026
APSB26-141	Security Bulletin for Adobe Acrobat and Reader  \| APSB26-141	September 8, 2026
APSB26-130	Security updates available for Adobe Photoshop \| APSB26-130	September 8, 2026
APSB26-142	Security updates available for Adobe Campaign Classic \| APSB26-142	September 8, 2026
APSB26-98	Security updates available for Adobe Experience Manager \| APSB26-98	September 8, 2026
APSB26-138	Security Updates Available for Adobe Commerce \| APSB26-138	September 8, 2026
APSB26-136	Security updates available for Adobe Photoshop (Mobile) \| APSB26-136	September 8, 2026
APSB26-132	Security updates available for Adobe Animate \| APSB26-132	September 8, 2026
APSB26-131	Security Updates Available for Adobe Illustrator \| APSB26-131	September 8, 2026
APSB26-146	Security Updates Available for Adobe Commerce \| APSB26-146	September 7, 2026

Known Exploited Adobe Vulnerabilities

The following Adobe vulnerabilities have recently been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vul	Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code. CVE-2026-75650	September 8, 2026
Adobe ColdFusion Path Traversal Vulnerability	Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user. CVE-2026-48282 Exploit Probability: 99.0%	July 7, 2026
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability	Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption. CVE-2009-3459 Exploit Probability: 86.6%	May 20, 2026
Adobe Acrobat and Reader Prototype Pollution Vulnerability	Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. CVE-2026-34621 Exploit Probability: 7.1%	April 13, 2026
Adobe Acrobat Use-After-Free Vulnerability	Adobe Acrobat contains a use-after-free vulnerability that allows for code execution CVE-2020-9715 Exploit Probability: 48.4%	April 13, 2026
Adobe Commerce and Magento Improper Input Validation Vulnerability	Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API. CVE-2025-54236 Exploit Probability: 96.7%	October 24, 2025
Adobe Experience Manager Forms Code Execution Vulnerability	Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution. CVE-2025-54253 Exploit Probability: 87.5%	October 15, 2025
Adobe ColdFusion Deserialization Vulnerability	Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution. CVE-2017-3066 Exploit Probability: 90.6%	February 24, 2025
Adobe ColdFusion Improper Access Control Vulnerability	Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel. CVE-2024-20767 Exploit Probability: 98.5%	December 16, 2024
Adobe Flash Player Code Execution Vulnerability	Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content. CVE-2013-0648 Exploit Probability: 11.1%	September 17, 2024
Adobe Flash Player Incorrect Default Permissions Vulnerability	Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. CVE-2013-0643 Exploit Probability: 10.5%	September 17, 2024
Adobe Flash Player Integer Underflow Vulnerablity	Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. CVE-2014-0497 Exploit Probability: 99.9%	September 17, 2024
Adobe Flash Player Double Free Vulnerablity	Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. CVE-2014-0502 Exploit Probability: 24.2%	September 17, 2024
Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) V	Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution. CVE-2024-34102 Exploit Probability: 100.0%	July 17, 2024
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability	Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. CVE-2023-38203 Exploit Probability: 96.7%	January 8, 2024
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability	Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. CVE-2023-29300 Exploit Probability: 100.0%	January 8, 2024
Adobe Acrobat and Reader Use-After-Free Vulnerability	Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user. CVE-2023-21608 Exploit Probability: 61.5%	October 10, 2023
Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability	Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution. CVE-2023-26369 Exploit Probability: 7.0%	September 14, 2023
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability	Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user. CVE-2023-26359 Exploit Probability: 17.9%	August 21, 2023
Adobe ColdFusion Improper Access Control Vulnerability	Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. CVE-2023-29298 Exploit Probability: 99.8%	July 20, 2023

Of the known exploited vulnerabilities above, 12 are in the top 1%, or the 99th percentile of the EPSS exploit probability rankings. 5 known exploited Adobe vulnerabilities are in the top 5% (95th percentile or greater) of the EPSS exploit probability rankings.

Top 10 Riskiest Adobe Vulnerabilities

Based on the current exploit probability, these Adobe vulnerabilities are on CISA's Known Exploited vulnerabilities list (KEV) and are ranked by the current EPSS exploit probability.

Rank	CVE	EPSS	Vulnerability
1	CVE-2024-34102	100.0%	Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) V
2	CVE-2023-29300	100.0%	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
3	CVE-2018-15961	100.0%	Adobe ColdFusion Remote Code Execution
4	CVE-2015-3113	99.9%	Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
5	CVE-2014-0497	99.9%	Adobe Flash Player Integer Underflow Vulnerablity
6	CVE-2023-29298	99.8%	Adobe ColdFusion Improper Access Control Vulnerability
7	CVE-2023-38205	99.7%	Adobe ColdFusion Improper Access Control Vulnerability
8	CVE-2010-2861	99.7%	Adobe ColdFusion Directory Traversal Vulnerability
9	CVE-2011-0611	99.4%	Adobe Flash Player Remote Code Execution Vulnerability
10	CVE-2015-5119	99.3%	Adobe Flash Player Use-After-Free Vulnerability

By the Year

In 2026 there have been 782 vulnerabilities in Adobe with an average score of 6.8 out of ten. Last year, in 2025 Adobe had 817 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Adobe in 2026 could surpass last years number. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.50.

Year	Vulnerabilities	Average Score
2026	782	6.84
2025	817	6.33
2024	753	6.20
2023	668	6.35
2022	421	6.77
2021	323	6.73
2020	344	7.74
2019	324	6.72
2018	94	7.91

It may take a day or so for new Adobe vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Adobe Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-81984	Sep 08, 2026	Adobe Acrobat Reader UAF Disclosure Vulnerability (CVE-2026-81984) Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81989	Sep 08, 2026	Acrobat Reader Use-After-Free CVE-2026-81989 Enables Arbitrary Code Execution Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81991	Sep 08, 2026	Acrobat Reader OOB Read for Sensitive Memory Disclosure (Adobe) Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81980	Sep 08, 2026	Acrobat Reader OOB Write Enables A.C.E. (user interaction) Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81990	Sep 08, 2026	Acrobat Reader UAF Arbitrary Code Exec w/ Malicious File Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81987	Sep 08, 2026	Adobe Acrobat Reader Integer Overflow Arbitrary Code Exec (CVE-2026-81987) Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-79910	Sep 08, 2026	Adobe Acrobat Reader OOB Read Sensitive Memory Disclosure Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81993	Sep 08, 2026	Acrobat Reader Heap Buffer Overflow (CVE-2026-81993) Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-79907	Sep 08, 2026	Adobe Acrobat Reader Double Free CVE-2026-79907 Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-80159	Sep 08, 2026	Adobe Acrobat Reader Untrusted Search Path Priv Escalation Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-79909	Sep 08, 2026	Adobe Acrobat Reader UAF Leads to Arbitrary Code Exec Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81973	Sep 08, 2026	Acrobat Reader UAF CVE-2026-81973 Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81988	Sep 08, 2026	Adobe Acrobat Reader Use-After-Free in PDF Parsing Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81977	Sep 08, 2026	Acrobat Reader Integer Underflow Vulnerability (CVE-2026-81977) Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-80162	Sep 08, 2026	Acrobat Reader UAF memory disclosure (CVE-2026-80162) Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81986	Sep 08, 2026	Acrobat Reader Use-After-Free CVE-2026-81986 Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81981	Sep 08, 2026	Acrobat Reader OOB Write -> Arbitrary Code Exec Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-80161	Sep 08, 2026	Acrobat Reader Type Confusion Leads to Arbitrary Code Execution (CVE-2026-80161) Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81997	Sep 08, 2026	Adobe Acrobat Reader: Authorization Bypass via Malicious File Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.	Acrobat Reader
CVE-2026-81976	Sep 08, 2026	Adobe Acrobat Reader UAF Arbitrary Code Exec Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81994	Sep 08, 2026	Acrobat Reader Prototype Pollution Allows Arbitrary FS Read Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.	Acrobat Reader
CVE-2026-81985	Sep 08, 2026	Acrobat Reader Use-After-Free Allows Arbitrary Code Exec Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-80160	Sep 08, 2026	Acrobat Reader OOB Read CVE-2026-80160: Sensitive Data Disclosure Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81979	Sep 08, 2026	Acrobat Reader OOB Write CVE-2026-81979 - Arbitrary Code Exec via User Interaction Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81996	Sep 08, 2026	Adobe Acrobat Reader Incorrect Authorization Privilege Escalation Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed.	Acrobat Reader
CVE-2026-81992	Sep 08, 2026	Acrobat Reader Heap Buffer Overflow (CVE-2026-81992) Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-82001	Sep 08, 2026	Acrobat Reader Uncontrolled Resource Consumption Causing DoS Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81982	Sep 08, 2026	Acrobat Reader OOB Read Info Disclosure (CVE-2026-81982) Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81978	Sep 08, 2026	Out-of-Bounds Read in Acrobat Reader Enables Sensitive Memory Disclosure Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81975	Sep 08, 2026	Adobe Acrobat Reader UAF Arbitrary Code Execution Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-81983	Sep 08, 2026	Acrobat Reader OOB Write for Arbitrary Code Execution Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-79908	Sep 08, 2026	Acrobat Reader OOB Write Arbitrary Code Exec (CVE-2026-79908) Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.	Acrobat Reader
CVE-2026-71357	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-75678	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-75687	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-71565	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-75672	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-75734	Sep 08, 2026	Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.	Experience Manager
CVE-2026-75706	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-75730	Sep 08, 2026	Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.	Experience Manager
CVE-2026-75719	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-75690	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-75707	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-75715	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2025-64838	Sep 08, 2026	Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.	Experience Manager
CVE-2026-75640	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-75646	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager
CVE-2026-75643	Sep 08, 2026	Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.	Experience Manager
CVE-2026-75726	Sep 08, 2026	Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.	Experience Manager
CVE-2026-19612	Sep 08, 2026	Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.	Experience Manager