September 8, 2026
Adobe Security Bulletin · September 2026
Total
184
Critical
23
Zero-day
1
KEV
1
1 zero-day / actively exploited
By product family
Unassigned183 CVEs
- CVE-2026-73369CVSS 10.0
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75699CVSS 10.0
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75703CVSS 10.0
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75721CVSS 10.0
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75723CVSS 10.0
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-82004CVSS 10.0
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-83660CVSS 10.0
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
- CVE-2026-84412CVSS 10.0
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-89275CVSS 10.0
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-19232CVSS 9.9
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.
- CVE-2026-48273CVSS 9.9
ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-82008CVSS 9.9
Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-82010CVSS 9.9
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-82013CVSS 9.9
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
- CVE-2026-82443CVSS 9.9
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
- CVE-2026-89276CVSS 9.9
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-76200CVSS 9.3
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-76201CVSS 9.3
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75728CVSS 9.1
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75746CVSS 9.1
ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-82009CVSS 9.1
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-82011CVSS 9.1
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass.
- CVE-2026-81996CVSS 8.8
Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
- CVE-2026-77111CVSS 8.7
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
- CVE-2026-75990CVSS 8.6
Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75991CVSS 8.6
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-76190CVSS 8.6
ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-76199CVSS 8.6
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-77109CVSS 8.6
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
- CVE-2026-75993CVSS 8.5
ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-82003CVSS 8.5
Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75999CVSS 8.4
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-76191CVSS 8.2
Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-76202CVSS 8.2
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
- CVE-2026-81994CVSS 8.2
Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read.
- CVE-2026-75631CVSS 7.8
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75771CVSS 7.8
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75862CVSS 7.8
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75863CVSS 7.8
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-75992CVSS 7.8
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-79907CVSS 7.8
Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-79908CVSS 7.8
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-79909CVSS 7.8
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-80161CVSS 7.8
Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81973CVSS 7.8
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81975CVSS 7.8
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81976CVSS 7.8
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81979CVSS 7.8
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81980CVSS 7.8
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81981CVSS 7.8
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81983CVSS 7.8
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81985CVSS 7.8
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81986CVSS 7.8
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81987CVSS 7.8
Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81988CVSS 7.8
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81989CVSS 7.8
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81990CVSS 7.8
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-81992CVSS 7.8
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-82005CVSS 7.8
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-82006CVSS 7.8
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-82007CVSS 7.8
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
- CVE-2026-77110CVSS 7.6
Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass.
- CVE-2026-75998CVSS 7.5
ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read.
- CVE-2026-77108CVSS 7.5
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
- CVE-2026-76196CVSS 7.4
Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation.
- CVE-2026-76000CVSS 6.5
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
- CVE-2026-81997CVSS 6.3
Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
- CVE-2026-76002CVSS 6.1
ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-79910CVSS 5.5
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
- CVE-2026-80160CVSS 5.5
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
- CVE-2026-80162CVSS 5.5
Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory.
- CVE-2026-81977CVSS 5.5
Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory.
- CVE-2026-81978CVSS 5.5
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
- CVE-2026-81982CVSS 5.5
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
- CVE-2026-81984CVSS 5.5
Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory.
- CVE-2026-81991CVSS 5.5
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
- CVE-2026-81993CVSS 5.5
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory.
- CVE-2026-82001CVSS 5.5
Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
- CVE-2025-64542CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2025-64584CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2025-64588CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2025-64589CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2025-64610CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2025-64618CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2025-64830CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2025-64838CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2025-64854CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2025-64866CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2025-64868CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-19479CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-19612CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-19644CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-19713CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-27227CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-71356CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-71357CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-71388CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-71440CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-71565CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-72626CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-72627CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75629CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75635CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75636CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75637CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75639CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75640CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75642CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75643CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75644CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75646CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75647CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75651CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75652CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75657CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75659CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75660CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75661CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75666CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75667CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75668CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75669CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75670CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75671CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75672CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75674CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75675CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75677CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75678CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75679CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75680CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75681CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75683CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75685CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75687CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75690CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75691CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75692CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75693CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75694CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75695CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75696CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75700CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75701CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75702CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75704CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75705CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75706CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75707CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75708CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75709CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75710CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75711CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75712CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75713CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75714CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75715CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75716CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75717CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75718CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75719CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75720CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75722CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75724CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75725CVSS 5.4
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.
- CVE-2026-75727CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75729CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75730CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75731CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75733CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75734CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75735CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75736CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75737CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75738CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75739CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75740CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75741CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-75742CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-79905CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-84397CVSS 5.4
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
- CVE-2026-80159CVSS 4.0
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation.
- CVE-2026-75726CVSS 3.5
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.