PT-2026-48247

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30365 through 26.001.21651 Description A Use After Free issue exists in the Multimedia Rendition component, which could lead to arbitrary code execution in the context of the current user. This occurs when a user...

PT-2026-48136

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions prior to 21.3 InDesign Desktop versions prior to 20.5.3 Description A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue can lead to arbitra...

PT-2026-48094

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier Description Improper input validation allows a low-privileged attacker to bypass security measures and gain unauthorized write access. Exploitation requires user interactio...

Adobe CAI Content Credentials Path Traversal Vulnerability

Adobe CAI Content Credentials is a content trust marking system provided by Adobe Inc. in the United States. It offers capabilities for authenticating digital content sources and tracking editing history. The Adobe CAI Content Credentials version [email protected] and versions prior to c2pa-v0.80.1...

PT-2026-48133

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions prior to 21.3 InDesign Desktop versions prior to 20.5.3 Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issu...

CVE-2026-34698: Heap-based Buffer Overflow

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-48135

Name of the Vulnerable Software and Affected Versions Adobe InDesign Desktop versions prior to 21.3 Adobe InDesign Desktop versions prior to 20.5.3 Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hol...

PT-2026-48146

Name of the Vulnerable Software and Affected Versions Adobe InCopy versions 21.3 and 20.5.3 and earlier Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory...

PT-2026-48221

Name of the Vulnerable Software and Affected Versions Substance3D Sampler versions 6.0.0 and earlier Description An out-of-bounds write occurs when the software processes a malicious file. This issue can lead to arbitrary code execution within the context of the current user and requires user...

PT-2026-48143

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5.3 and earlier InDesign Desktop version 21.3 Description An out-of-bounds read issue occurs when the software reads data beyond the intended buffer in memory. This can lead to the disclosure of sensitive memory...

PT-2026-48145

Name of the Vulnerable Software and Affected Versions InCopy versions 21.3, 20.5.3 and earlier Description A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue can lead to arbitrary code execution in the context of the...

PT-2026-48138

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 21.3 and earlier InDesign Desktop versions 20.5.3 and earlier Description An out-of-bounds write issue exists where data is written outside the intended buffer boundaries, which could allow arbitrary code execution in...

CVE-2026-34699: Heap-based Buffer Overflow

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-48137

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5.3 and earlier InDesign Desktop version 21.3 Description A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue can lead to arbitrary code...

PT-2026-48140

Name of the Vulnerable Software and Affected Versions Adobe InDesign Desktop versions prior to 21.3 Adobe InDesign Desktop versions prior to 20.5.3 Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hol...

CVE-2026-34701: Heap-based Buffer Overflow

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-48260

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30365 and 26.001.21651 and earlier Description An Uncontrolled Search Path Element issue exists where the application does not properly validate the paths used to search for files. This can lead to arbitrary code...

PT-2026-48228

Name of the Vulnerable Software and Affected Versions Substance3D - Sampler versions 6.0.0 and earlier Description An out-of-bounds write issue exists, which occurs when a program writes data past the end of the intended buffer. This can lead to arbitrary code execution within the context of the...

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager is a content management solution developed by Adobe Inc. in the United States. It can be used to build websites, mobile applications, and forms. This solution supports mobile content management, marketing and sales activity management, and multi-site management, among...

PT-2026-48278

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC versions prior to 7.4.3 build 9395 Description An incorrect authorization issue exists that could allow arbitrary code execution in the context of the current user. This flaw can be exploited without requiring any us...