Adobe Illustrator < 29.8.10 / 30.0 < 30.7 Memory exposure (APSB26-124)

The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.10, 30.7. It is, therefore, affected by a vulnerability as referenced in the APSB26-124 advisory. - Illustrator is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive...

PT-2026-81456

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic versions prior to 7.4.4 build 9401 Description An Improper Neutralization of Special Elements used in an OS Command occurs, leading to an OS Command Injection. This allows an unauthenticated attacker to execute arbitrary...

PT-2026-81311

A weakness has been identified in dekdee adobe-xd-mcp 1.0.0. Impacted is an unknown function of the file src/parsers/xd-parser.ts of the component file-access-from-request Endpoint. Executing a manipulation of the argument outputFile/outputDir can lead to path traversal. It is possible to launch...

CVE-2026-76195: Improper Neutralization of Special Elements used in an OS Command

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...

PT-2026-81463

Name of the Vulnerable Software and Affected Versions Adobe XD affected versions not specified Description A Buffer Overflow occurs when a program writes more data to a block of memory than it can hold, potentially overwriting adjacent memory. This issue could allow an attacker to execute arbitra...

CVE-2026-76193: Server-Side Request Forgery (SSRF)

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

APSB26-125 : Security Updates Available for Adobe XD

Adobe has released updates for Adobe XD. This update resolves a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

APSB26-110 : Security updates available for Content Credentials SDK

Adobe has released a security update for Content Credentials SDK. This update addresses critical and important vulnerabilities that could result in application denial-of-service and arbitrary file system read. Adobe is not aware of any exploits in the wild for any of the issues addressed in this...

APSB26-134 : Security update available for Adobe Campaign Classic

Adobe has released a security update for Adobe Campaign Classic. This update addresses critical vulnerabilities that could result in arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

APSB26-121 : Security updates available for Substance 3D Sampler

Adobe has released an update for Adobe Substance 3D Sampler. This update addresses critical vulnerabilities that could result in arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

APSB26-124 : Security Updates Available for Adobe Illustrator

Adobe has released an update for Adobe Illustrator. This update resolves an important vulnerability that could result in memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

PT-2026-81457

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Neutralization of Special Elements used in an OS Command occurs, leading to an OS Command Injection. This allows an attacker to execute arbitrary code in the contex...

PT-2026-81455

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description Adobe Campaign Classic is affected by a Server-Side Request Forgery SSRF issue, which occurs when a server is tricked into making requests to an unintended location. This flaw...

CVE-2026-76197: Improper Neutralization of Special Elements used in an OS Command

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...

CVE-2026-79622: Improper Limitation of a Pathname to a Restricted Directory

A weakness has been identified in dekdee adobe-xd-mcp 1.0.0. Impacted is an unknown function of the file src/parsers/xd-parser.ts of the component file-access-from-request Endpoint. Executing a manipulation of the argument outputFile/outputDir can lead to path traversal. It is possible to launch...

CVE-2026-71399: Buffer Copy without Checking Size of Input

Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a...

Adobe Lightroom Classic < 15.5 Multiple Arbitrary code execution (APSB26-94)

The version of Adobe Lightroom Classic installed on the remote Windows host is prior to 15.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-94 advisory. - Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path...

MINI-3CM3-CP96-CFMX

Bulletin has no description...

Adobe Campaign Classic SQL Injection

The vulnerability of the Adobe Campaign Classic software platform for managing marketing campaigns is related to the lack of security measures regarding the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Adobe Campaign Classic Auth Bypass RCE

The vulnerability of the Adobe Campaign Classic software platform for managing marketing campaigns is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...