CVE-2026-52902

CVE-2026-52902 affects awxkit (AWX CLI). The YAML !include directive permits path traversal, enabling an attacker to craft a YAML file that reads arbitrary local YAML files when a user imports it via awx --conf.format yaml import. This is a client-side vulnerability requiring user interaction. Mi...

PT-2026-48145

Name of the Vulnerable Software and Affected Versions InCopy versions 21.3, 20.5.3 and earlier Description A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue can lead to arbitrary code execution in the context of the...

PT-2026-48081

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions prior to 6.5.25 Adobe Experience Manager versions prior to LTS SP2 Adobe Experience Manager versions prior to 2026.05 Description An Improper Redirect Open Redirect issue exists where an attacker can construct...

PT-2026-48275

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2023.19 and earlier ColdFusion versions 2025.8 and earlier Description An Improper Restriction of XML External Entity Reference XXE allows arbitrary file system read. This issue enables an attacker to access sensitive files...

PT-2026-48052

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier Description A DOM-based Cross-Site Scripting XSS issue exists due to insufficient protection of the web page structure. This allows a remote attacker to execute malicious...

PT-2026-48276

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.2 and earlier Description A heap-based buffer overflow allows for arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user interaction to trigger...

PT-2026-48146

Name of the Vulnerable Software and Affected Versions Adobe InCopy versions 21.3 and 20.5.3 and earlier Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory...

PT-2026-48091

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier Description A DOM-based Cross-Site Scripting XSS issue exists due to insufficient protection of the web page structure. This allows a remote attacker to execute arbitrary...

PT-2026-48074

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier Description A DOM-based Cross-Site Scripting XSS issue exists due to insufficient protection of the web page structure. This allows a remote attacker to execute arbitrary...

PT-2026-48223

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.7 and earlier Description A dependency on a vulnerable third-party component allows for arbitrary code execution in the context of the current user. This issue requires user interaction, specifically the opening...

PT-2026-48084

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser...

PT-2026-48138

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 21.3 and earlier InDesign Desktop versions 20.5.3 and earlier Description An out-of-bounds write issue exists where data is written outside the intended buffer boundaries, which could allow arbitrary code execution in...

PT-2026-48254

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions prior to 26.001.21652 Description A Use After Free issue exists where memory is accessed after it has been freed. This can lead to arbitrary code execution in the context of the current user. Exploitation requires user...

PT-2026-48133

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions prior to 21.3 InDesign Desktop versions prior to 20.5.3 Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issu...

PT-2026-48259

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions prior to 26.001.21652 Description An out-of-bounds read issue exists where the software reads data outside the intended buffer in memory. This can lead to the disclosure of sensitive memory information. Exploitation...

PT-2026-48264

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions prior to 26.001.21652 Description An out-of-bounds read issue occurs when the software processes a malicious file, which can lead to the disclosure of sensitive memory information or cause a denial of service...

PT-2026-48246

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30365 through 26.001.21651 Description A Use After Free issue exists in the font handling component, which could lead to arbitrary code execution in the context of the current user. This occurs when a victim open...

PT-2026-48277

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.2 and earlier Description A heap-based buffer overflow allows for arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user interaction for...

PT-2026-48247

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30365 through 26.001.21651 Description A Use After Free issue exists in the Multimedia Rendition component, which could lead to arbitrary code execution in the context of the current user. This occurs when a user...

PT-2026-48245

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30365 through 26.001.21651 Description An out-of-bounds write occurs during TIF file parsing due to an integer overflow. This issue allows for arbitrary code execution in the context of the current user, provided...