PT-2026-32892

InDesign Desktop | Heap-based Buffer Overflow CWE-122 CVE: CVE-2026-34628 PT ID: PT-2026-32892 Vendor: Adobe Product: InDesign Desktop CVSS: 7.8 Credits: n/a Description: InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resul...

PT-2026-32891

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5.2 and 21.2 and earlier Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue could result in arbitrary code execution in the...

PT-2026-32764

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue...

PT-2026-32705

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions prior to 26.001.21412 Description An Improperly Controlled Modification of Object Prototype Attributes, also known as Prototype Pollution a flaw where an attacker can manipulate the prototype of an object to inject...

PT-2026-32913

InCopy | Out-of-bounds Read CWE-125 CVE: CVE-2026-27287 PT ID: PT-2026-32913 Vendor: Adobe Product: InCopy CVSS: 7.8 Credits: n/a Description: InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read pas...

PT-2026-32944

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions prior to 2022.9 Description An out-of-bounds write issue exists where the software writes data past the end of the intended buffer, which could result in arbitrary code execution in the context of the current user...

PT-2026-32899

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of thi...

PT-2026-32698

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5.2 through 21.2 Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue could result in arbitrary code execution in the context...

PT-2026-32919

ColdFusion | Improper Input Validation CWE-20 CVE: CVE-2026-27282 PT ID: PT-2026-32919 Vendor: Adobe Product: ColdFusion CVSS: 7.5 Credits: n/a Description: ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security...

PT-2026-32701

Name of the Vulnerable Software and Affected Versions Adobe InDesign versions prior to 20.5.3 Adobe InDesign versions prior to 21.3 Description A heap-based buffer overflow occurs in the dynamic memory of the application. This issue can be triggered when a user opens a malicious file, potentially...

Adobe InDesign < 20.5.3 / 21.0 < 21.3.0 Multiple Vulnerabilities (APSB26-32)

The version of Adobe InDesign installed on the remote Windows host is prior to 20.5.3, 21.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-32 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2026-34627,...

PT-2026-32903

Name of the Vulnerable Software and Affected Versions Bridge versions 16.0.2 and earlier Bridge versions 15.1.4 and earlier Description A Heap-based Buffer Overflow occurs when an application writes more data to a heap-allocated memory block than it can hold. This issue could result in arbitrary...

PT-2026-32893

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5.2 and 21.2 and earlier Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue could result in arbitrary code execution in the...

PT-2026-32949

Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim...

PT-2026-32942

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions prior to 2022.9 Description A Heap-based Buffer Overflow exists which could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically that a victim ope...

PT-2026-32648

Name of the Vulnerable Software and Affected Versions Ivanti N-ITSM versions prior to 2025.4 Description Stored Cross-Site Scripting XSS allows a remote authenticated attacker to obtain limited information from other user sessions. This issue requires user interaction to be exploited...

PT-2026-32950

Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in tha...

PT-2026-32922

ColdFusion | Improper Input Validation CWE-20 CVE: CVE-2026-27306 PT ID: PT-2026-32922 Vendor: Adobe Product: ColdFusion CVSS: 8.4 Credits: n/a Description: ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary co...

CVE-2026-27296: Integer Underflow (Wrap or Wraparound)

Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-27295: Out-of-bounds Write

Adobe Framemaker versions 2022.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...