CVE-2026-34660: Incorrect Authorization

Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially...

CVE-2026-34659: Deserialization of Untrusted Data

Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this...

PT-2026-40323

Name of the Vulnerable Software and Affected Versions Illustrator versions 29.8.6 and 30.3 and earlier Description An out-of-bounds write issue exists where memory is written outside the intended boundary of a buffer. This could allow arbitrary code execution in the context of the current user,...

PT-2026-40404

Name of the Vulnerable Software and Affected Versions CAI Content Credentials versions 0.78.2, 0.7.0 and earlier Description Improper Input Validation can lead to an application denial-of-service, allowing an attacker to crash the application. This issue does not require user interaction...

PT-2026-40173

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6.4 and earlier After Effects version 26.0 Description A heap-based buffer overflow a condition where a program writes more data to a heap-allocated memory block than it can hold could lead to arbitrary code execution...

CVE-2026-34636: Out-of-bounds Write

Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-40168

Name of the Vulnerable Software and Affected Versions Premiere Pro versions 26.0.2 and earlier Premiere Pro versions 25.6.4 and earlier Description An out-of-bounds write issue exists where the software writes data past the end of the intended buffer, which could lead to arbitrary code execution ...

PT-2026-40342

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 2025.9.15 and 2025.8.157 and earlier Description An Incorrect Authorization issue exists that could lead to arbitrary code execution in the context of the current user. An attacker can exploit this by injecting malicious...

PT-2026-40401

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions prior to 2.4.9-beta1 Description An improper authorization issue allows an attacker to bypass security features and obtain unauthorized write access. Exploitation requires user interaction, such as visiting a maliciousl...

PT-2026-40172

Name of the Vulnerable Software and Affected Versions Media Encoder versions prior to 26.0.3 Media Encoder versions prior to 25.6.5 Description An Integer Overflow or Wraparound occurs when an arithmetic operation attempts to create a numeric value that is outside of the range that can be...

PT-2026-40341

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 2025.9.15 and earlier Adobe Connect versions 2025.8.157 and earlier Description Deserialization of Untrusted Data occurs when an application processes data from an untrusted source without sufficient validation,...

CVE-2026-34661: Out-of-bounds Write

Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-36515: Uncontrolled Search Path Element

Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This...

CVE-2026-34647: Server-Side Request Forgery (SSRF)

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain...

PT-2026-40399

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions prior to 2.4.9-beta1 Description A dependency on a vulnerable third-party component could result in an application denial-of-service. An attacker could exploit this issue to crash the application without requiring user...

PT-2026-40391

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions prior to 2.4.9-beta1 Description An incorrect authorization issue allows an attacker to bypass security features and gain unauthorized write access. This exploitation does not require any user interaction. Recommendatio...

PT-2026-40345

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions prior to 15.1.1 Description An out-of-bounds write issue exists where memory is written outside the intended boundary of a buffer. This could allow arbitrary code execution in the context of the current user,...

CVE-2026-34664: Improper Limitation of a Pathname to a Restricted Directory

Substance3D - Designer versions 15.1.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories...

PT-2026-40170

Name of the Vulnerable Software and Affected Versions Premiere Pro versions 26.0.2 and earlier Premiere Pro versions 25.6.4 and earlier Description A Use After Free issue exists where the software continues to use a pointer after it has been freed, which could lead to arbitrary code execution in...

PT-2026-40407

Name of the Vulnerable Software and Affected Versions CAI Content Credentials versions 0.78.2, 0.7.0 and earlier Description Improper Input Validation allows an attacker to crash the application, resulting in a denial-of-service condition. This issue can be exploited without requiring user...