234646 matches found
CVE-2026-34624
Adobe Experience Manager (AEM) up to version 6.5.24, FP11.7 and earlier is affected by a DOM-based XSS (CWE-79). The issue allows an attacker to manipulate the DOM to execute malicious JavaScript in the victim’s browser, with exploitation requiring user interaction (victim visits a crafted webpag...
CVE-2026-34624 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of thi...
CVE-2026-34624 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of thi...
CVE-2026-32155
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-32154
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-32152
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-27924
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-27923
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-27288
Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of thi...
CVE-2026-26175
Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2026-27288
Adobe Experience Manager (AEM) is affected by a DOM-based XSS in versions 6.5.24 and FP11.7 and earlier. The issue arises from manipulating the DOM environment to execute malicious JavaScript in the victim’s browser, with exploitation requiring user interaction (the victim visits a crafted page)....
CVE-2026-27288 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of thi...
CVE-2026-27288 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of thi...
CVE-2026-32155
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-32155 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-32155
CVE-2026-32155 – Desktop Window Manager Use-After-Free : A security issue in Windows Desktop Window Manager allows an authenticated local attacker to achieve elevation of privilege via a use-after-free condition. The vulnerability is described as a local, post-authentication privilege escalation ...
CVE-2026-32155 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-32079 Web Account Manager Information Disclosure Vulnerability
...
CVE-2026-32079
CVE-2026-32079 is a Web Account Manager information disclosure vulnerability with a CVSSv3.1 base score of 5.5 (MEDIUM). It is exploitable locally with low attack complexity and low privileges required; user interaction is not required. The confidentiality impact is HIGH, while integrity and avai...