CVE-2026-21018

Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2025-64557

CVE-2025-64557 is a stored XSS in Adobe Experience Manager (AEM) versions 6.5.23 and earlier. A low-privileged attacker can inject malicious scripts into vulnerable form fields, and the payload may be executed in a victim’s browser when visiting the page containing the vulnerable field. The findi...