CVE-2026-104342

Adobe FrameMaker is affected by a Use After Free vulnerability (CWE-416) that could lead to arbitrary code execution within the context of the current user. Exploitation requires user interaction, specifically the opening of a malicious file. Adobe has released a security update to address this a...

CVE-2026-104344 Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104344

Adobe FrameMaker is affected by a Heap-based Buffer Overflow vulnerability (CWE-122) that could lead to arbitrary code execution within the context of the current user. Exploitation of this issue requires user interaction , specifically by a victim opening a malicious file. Adobe has released a p...

CVE-2026-103967 Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103967

Adobe Framemaker is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically the victim opening a malicious file. No sp...

CVE-2026-103857

Adobe Framemaker is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory . An attacker could leverage this flaw to access sensitive information, but exploitation requires user interaction where a victim must open a malicious file. No spec...

CVE-2026-95631

Adobe Commerce is affected by an Improper Input Validation vulnerability (CWE-20) that could allow an attacker with high privileges to achieve arbitrary code execution in the context of the current user. The vulnerability does not require user interaction to exploit, and its scope is changed. No ...

CVE-2026-103849

Adobe Commerce is impacted by an Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) vulnerability. This flaw could allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user, potentially leading to elevated access or full...

CVE-2026-92910

Adobe Commerce is affected by an Incorrect Authorization vulnerability (CWE-863) that enables a Security feature bypass . An unauthenticated attacker can exploit this flaw over the network to gain unauthorized read and limited write access . This vulnerability does not require user interaction. W...

CVE-2026-92464

Adobe Commerce is affected by an Improper Input Validation vulnerability (CWE-20) that could lead to arbitrary code execution in the context of the current user. An attacker with high privileges can exploit this issue without user interaction. No specific affected versions, root cause components,...

CVE-2026-95630

Adobe Commerce is affected by an Improper Input Validation (CWE-20) vulnerability. A low-privileged attacker could exploit this issue to bypass security measures and achieve unauthorized read access . This vulnerability can be exploited over the network without requiring any user interaction. The...

CVE-2026-92922

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A high-privileged attacker can inject malicious scripts into vulnerable form fields . When a victim navigates to the affected page, the malicious JavaScript may execute in their browser, potentially leading ...

CVE-2026-92909 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-92909

Adobe Commerce is affected by an Incorrect Authorization vulnerability (CWE-863 ) that could lead to arbitrary code execution in the context of the current user. An attacker could exploit this issue without requiring any user interaction. While the vulnerability details are provided, no specific ...

CVE-2026-92908

Adobe Commerce is affected by an Incorrect Authorization vulnerability (CWE-863) that enables a Security feature bypass . A low-privileged attacker can exploit this issue without user interaction to gain unauthorized read and write access , which may result in a limited disruption to availability...

CVE-2026-100133

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79 ) that allows an attacker to inject malicious scripts into vulnerable form fields. If a victim views the page containing these fields, the malicious JavaScript may execute in their browser, potentially leading...

CVE-2026-92911

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields, which may execute in a victim's browser when they visit the affected page. This could result in the attacker gaining elevat...

CVE-2023-26360-adobe-coldfusion-rce-exploit

Critical vulnerabilities in Adobe Coldfusion CVE-2023-26359, CVE-2023-26360 and CVE-2023-26359 On March 8, 2023, Adobe released security updates to address critical vulnerabilities in Adobe ColdFusion, a popular web application development platform. These vulnerabilities, classified as improper...

CVE-2018-4901

CVE-2018-4901 crash poc & Leak info PoC details see: https://bigric3.blogspot.com/2018/03/cve-2018-4901-analysisadobe-acrobat.html...

CVE-2026-48282

CVE-2026-48282-POC CVE-2026-48282 is a path traversal vulnerability in Adobe ColdFusion's Remote Development Service RDS with a CVSS score of 10.0 Critical. It allows unauthenticated attackers to read & write arbitrary files via the /CFIDE/main/ide.cfm endpoint, leading to Remote Code Execution...