CVE-2026-75692 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-75657

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can manipulate the DOM environment to execute malicious JavaScript within the victim's browser context. Exploitation requires user interaction — the victim must visit a crafted webpa...

CVE-2026-75720 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-76002

Adobe ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CWE-79). If an attacker can convince a victim to visit a crafted URL referencing a vulnerable page, malicious JavaScript may execute within the victim's browser context. The CVSS 3.1 score is 6.1 (MEDIUM) with a...

CVE-2026-76002 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)

ColdFusion is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed...

CVE-2026-76000

Adobe ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability (CWE-400) that can lead to an application denial-of-service . An attacker on an adjacent network can exploit this without user interaction or prior authentication, exhausting system resources to bring down the appl...

CVE-2026-75998

Adobe ColdFusion is affected by an Improper Access Control flaw (CWE-284) that allows an unauthenticated, remote attacker to perform an arbitrary file system read , gaining access to sensitive files and directories outside the intended scope. No user interaction is required. The CVSS 3.1 score is...

CVE-2026-76190

Adobe ColdFusion is affected by an Eval Injection vulnerability (CWE-95), where improper neutralization of directives in dynamically evaluated code could lead to arbitrary code execution in the context of the current user. The vulnerability is exploitable over the network with low complexity and ...

CVE-2026-76190 ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)

ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of...

CVE-2026-48273 ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)

ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code...

CVE-2026-75862 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75862

Adobe Photoshop Desktop is affected by an Integer Overflow or Wraparound (CWE-190) vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) with a l...

CVE-2026-76199

Photoshop Desktop is affected by an Uncontrolled Search Path Element (CWE-427) vulnerability that could allow an attacker to achieve arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically that a victim opens a malicious file. The CVSS 3....

CVE-2026-82005 Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-76199 Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...

CVE-2026-76199 Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...

CVE-2026-82007 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-82006

Photoshop Desktop is affected by a Heap-based Buffer Overflow (CWE-122) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction —specifically, a victim must open a malicious file . The CVSS v3.1 base score is 7.8 (HIGH) with a local att...

CVE-2026-82006 Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75863 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...