adobe vulnerabilities

Recent CVEs affecting adobe products. 44 tracked.

adobe has 44 tracked vulnerabilities, 12 critical and 2 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 43. Most recent: 2026-10-13. Highest priority: CVE-2026-75650 (score 96/100).

CVE-2026-48333 CRITICAL 9.8 UPGRADE Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in priv
CVE-2026-48399 HIGH 7.5 UPGRADE Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could r
CVE-2026-48388 HIGH 8.6 MITIGATE Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have re
CVE-2026-48395 HIGH 8.6 UPGRADE Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in
CVE-2026-48396 HIGH 8.6 UPGRADE Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution i
CVE-2026-48372 HIGH 7.8 UPGRADE Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code e
CVE-2026-48374 HIGH 7.8 UPGRADE Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulner
CVE-2026-48390 HIGH 8.2 UPGRADE Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation
CVE-2026-48391 HIGH 8.2 UPGRADE Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in
CVE-2026-48392 HIGH 7.8 UPGRADE Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th
CVE-2026-48393 HIGH 7.8 UPGRADE Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th
CVE-2026-48394 HIGH 7.8 UPGRADE Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th
CVE-2026-34641 HIGH 7.8 UPGRADE UPGRADE Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution
CVE-2026-48449 CRITICAL 10.0 UPGRADE Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbi
CVE-2026-48448 HIGH 8.6 UPGRADE Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm
CVE-2026-48323 CRITICAL 10.0 UPGRADE Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template
CVE-2026-71398 CRITICAL 10.0 UPGRADE Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbi
CVE-2026-48330 CRITICAL 10.0 UPGRADE Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm
CVE-2026-48331 CRITICAL 10.0 UPGRADE Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could resu
CVE-2026-48326 CRITICAL 9.9 UPGRADE Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm
CVE-2026-48317 CRITICAL 9.6 UPGRADE Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated
CVE-2026-27302 CRITICAL 10.0 UPGRADE Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbi
CVE-2026-48381 CRITICAL 9.0 UPGRADE Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm
CVE-2026-48397 HIGH 8.6 UPGRADE Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitr
CVE-2026-48441 HIGH 8.6 UPGRADE Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Travers
CVE-2026-47940 HIGH 7.8 UPGRADE Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrar
CVE-2026-48404 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
CVE-2026-48405 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
CVE-2026-48406 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
CVE-2026-48407 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
CVE-2026-48408 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
CVE-2026-48409 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
CVE-2026-48410 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
CVE-2026-48447 HIGH 7.7 UPGRADE Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code
CVE-2026-83661 HIGH 7.8 UPGRADE Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrar
CVE-2026-95635 HIGH 7.8 UPGRADE Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in
CVE-2026-95636 HIGH 7.8 UPGRADE Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrar
CVE-2026-95637 HIGH 7.8 UPGRADE Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
CVE-2026-95638 HIGH 7.8 UPGRADE Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary cod
CVE-2026-95639 HIGH 8.6 UPGRADE Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code
CVE-2026-95640 MEDIUM 5.5 UPGRADE Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application
CVE-2026-95641 HIGH 7.8 UPGRADE Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
CVE-2026-71362 CRITICAL 9.1 EXPLOITED UPGRADE UPGRADE Adobe Commerce and Magento Incorrect Authorization Vulnerability
CVE-2026-75650 CRITICAL 10.0 EXPLOITED UPGRADE UPGRADE Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

FAQ

How do I fix adobe vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is adobe being exploited right now?

Yes: 2 adobe CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which adobe CVE should I patch first?

CVE-2026-75650 currently ranks highest (96/100): Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability.

Products

← Back to latest CVEs