PT-2025-42197

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4 through 2.4.9-alpha2 Description A low-privileged attacker could bypass security measures and maintain unauthorized access. Exploitation of this issue does not require user interaction. The issue is related to...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current user...

Adobe Connect 跨站脚本漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious script in a victim's browser...

PT-2025-42203

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description A DOM-based Cross-Site Scripting XSS issue exists in Adobe Connect. A high-privileged attacker could exploit this to execute malicious scripts in a victim’s browser. Exploitation requires a...

PT-2025-42202

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read access. Exploitation of this...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

PT-2025-42177

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions 2020.9 through 2022.7 Description A Use After Free issue exists in Adobe Framemaker. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User interaction is required...

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which could be exploited by an attacker to bypass security measures and gain unauthorized...

PT-2025-42201

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to elevated privileg...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The solution supports mobile content management, marketing and sales campaign management, and multi-site management. A...

Adobe Connect 跨站脚本漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit the vulnerability to steal the victim's...

APSB25-101 : Security update available for Adobe FrameMaker

Adobe has released a security update for Adobe FrameMaker. This update addresses critical vulnerabilities that could lead to arbitrary code execution...

APSB25-97 : Security update available for Adobe Animate

Adobe has released an update for Adobe Animate. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and memory exposure...

APSB25-96 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses a critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

Adobe Connect <= 12.9 Multiple Vulnerabilities (APSB25-70)

The version of Adobe Connect installed on the remote host is prior to 12.10. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-70 advisory. - Cross-site Scripting DOM-based XSS CWE-79 potentially leading to Arbitrary code execution CVE-2025-49552, CVE-2025-49553 -...

Adobe Illustrator < 28.7.10 / 29.0 < 29.8 Multiple Arbitrary code execution (APSB25-102) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.10, 29.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-102 advisory. - Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that...

PT-2025-42204

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description The software is susceptible to a DOM-based Cross-Site Scripting XSS issue. Successful exploitation could allow an attacker to execute malicious scripts in a victim’s browser, potentially...

Adobe Dimension 输入验证错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. An input validation error vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

Adobe Commerce 跨站脚本漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from a cross-site scripting vulnerability that can be exploited by an attacker to steal a victim's cookie-based authentication...

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a standalone desktop application for viewing and editing 3D files from Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Viewer 0.25.2 and earlier versions, which stems from an out-of-bounds write vulnerability that could lead to a denial of service o...