CVE-2025-49527

Adobe Illustrator (versions 28.7.6, 29.5.1 and earlier) is affected by a stack-based buffer overflow when handling malicious files, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). Affected products/versions are docu...

CVE-2025-49529

Adobe Illustrator is affected by CVE-2025-49529 (and related) in versions 28.7.6, 29.5.1 and earlier. The root cause is an Access of Uninitialized Pointer in the application, which could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a...

CVE-2025-49529 Illustrator | Access of Uninitialized Pointer (CWE-824)

Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49547 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-49547 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-49547

Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-49547

Adobe Experience Manager (AEM) versions 11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, potentially causing JavaScript to execute in a victim’s browser when visiting the page co...

CVE-2025-49534

Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-49534 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-49534

Adobe Experience Manager (AEM) versions 11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Low-privileged attackers can abuse this to inject malicious JavaScript, which may be executed in a victim’s browser when visiting pages containing ...

CVE-2025-49534 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2025-49533 Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)

Adobe Experience Manager MS versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged...

CVE-2025-49533

Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution. The issue enables pre-auth, no-user-interaction exploitation and is associated with AEM Forms/Deserialization vectors in multi...

CVE-2025-49533

Adobe Experience Manager MS versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged...

CVE-2025-49533 Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)

Adobe Experience Manager MS versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged...

CVE-2025-27203

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed...

CVE-2025-27203 Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed...

CVE-2025-27203

CVE-2025-27203 affects Adobe Connect 24.0 and earlier. Issue: Deserialization of untrusted data leading to arbitrary code execution. Exploitation requires user interaction and, per the sources, may change scope. Severity is high: CVSSv3.1 base score 9.6 (CRITICAL). Affected component is the deser...

CVE-2025-27203 Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed...

PT-2025-28758 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 24.0 and earlier Description: Adobe Connect versions 24.0 and earlier are susceptible to a Deserialization of Untrusted Data issue. Successful exploitation of this issue could allow an attacker to execute arbitrary code...