PT-2025-42201

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to elevated privileg...

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a standalone desktop application for viewing and editing 3D files from Adobe. A buffer error vulnerability exists in Adobe Substance3D Viewer 0.25.2 and prior versions, which stems from the presence of an out-of-bounds write that could lead to the execution of arbitrar...

APSB25-96 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses a critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

APSB25-97 : Security update available for Adobe Animate

Adobe has released an update for Adobe Animate. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and memory exposure...

APSB25-101 : Security update available for Adobe FrameMaker

Adobe has released a security update for Adobe FrameMaker. This update addresses critical vulnerabilities that could lead to arbitrary code execution...

Adobe Connect <= 12.9 Multiple Vulnerabilities (APSB25-70)

The version of Adobe Connect installed on the remote host is prior to 12.10. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-70 advisory. - Cross-site Scripting DOM-based XSS CWE-79 potentially leading to Arbitrary code execution CVE-2025-49552, CVE-2025-49553 -...

Adobe Illustrator < 28.7.10 / 29.0 < 29.8 Multiple Arbitrary code execution (APSB25-102) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.10, 29.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-102 advisory. - Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that...

PT-2025-42204

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description The software is susceptible to a DOM-based Cross-Site Scripting XSS issue. Successful exploitation could allow an attacker to execute malicious scripts in a victim’s browser, potentially...

Adobe Connect 输入验证错误漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect has an open redirection vulnerability that can be exploited by an attacker to cause users to be redirected to a malicious website...

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a standalone desktop application for viewing and editing 3D files from Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Viewer 0.25.2 and earlier versions, which stems from an out-of-bounds write vulnerability that could lead to a denial of service o...

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause arbitrary code to be executed in the current user's environment...

Adobe Commerce 跨站脚本漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from a cross-site scripting vulnerability that can be exploited by an attacker to steal a victim's cookie-based authentication...

Adobe Framemaker 安全漏洞

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A security vulnerability exists in Adobe Framemaker version 2020.9, 2022.7, and prior versions, which can be...

PT-2025-42198

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4 through 2.4.9-alpha2 Description A stored Cross-Site Scripting XSS issue exists in Adobe Commerce that could allow a high-privileged attacker to inject malicious scripts into vulnerable form fields. Successful...

PT-2025-42207

Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse...

PT-2025-42208

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 11.6 and earlier Description A stored Cross-Site Scripting XSS issue exists in Adobe Experience Manager. A low privileged attacker could inject malicious scripts into vulnerable form fields. Execution of...

PT-2025-42200

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript ma...

Adobe Dimension 资源管理错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. A memory misreference vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

Adobe Dimension 输入验证错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. An input validation error vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

Adobe Animate 23.x < 23.0.15 / 24.x < 24.0.12 Multiple Vulnerabilities (APSB25-97)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 23.0.15 or 24.0.12. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-97 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution...