72 matches found
CVE-2026-48438
CVE-2026-48438 affects CAI Content Credentials. A NULL pointer dereference can crash the application, causing denial-of-service. Exploitation is remote with no user interaction (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; base score 7.5). No fix/version details are provided in the documents.
CVE-2026-48443
Technical details about CVE-2026-48443 are not publicly available in the provided documents; monitor for updates from official sources.
CVE-2026-48290
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary code execution in the context of the current user. An attacker could exploit this to inject malicious scripts into a web page and potentially gain elevated access or control over...
CVE-2026-48439
CVE-2026-48439 affects CAI Content Credentials. It describes an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. An attacker could exhaust system resources via a network-based vector without user interaction. The NVD/CVE records list a CVSS v3.1...
CVE-2026-48296
CVE-2026-48296 concerns CAI Content Credentials and describes an Integer Underflow (Wrap or Wraparound) (CWE-191) that could cause an application to crash and enter a denial‑of‑service condition. Exploitation is characterized as local with no required user interaction (per CVSS 3.1 metrics: AV:L/...
CVE-2026-48287
Technical details about CVE-2026-48287 are not provided in the supplied documents. No specific affected products, versions, root cause, or remediation are disclosed. Monitor for updates from official CVE records and referenced sources.
CVE-2026-48352
CVE-2026-48352 concerns CAI Content Credentials and involves Improper Input Validation. The vulnerability could crash the affected application, causing a denial-of-service condition, with exploitation not requiring user interaction. The CVSS indicates a network-exposed, low-attack complexity, no ...
CVE-2026-48444
CVE-2026-48444 affects CAI Content Credentials and is described as an Integer Overflow/Wraparound vulnerability that could cause an application denial-of-service. The issue could be triggered locally without user interaction and may crash the application (impact: Availability High per the CVSS). ...
CVE-2026-47922
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability leading to potential privilege escalation. The issue requires user interaction (victim must visit a crafted URL or interact with a compromised page) and has a CVSSv3.1 base score of 4.7 (Medium) with attack ...
CVE-2026-48357
Technical details about CVE-2026-48357 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-48298
CVE-2026-48298 affects CAI Content Credentials. The vulnerability is an Integer Underflow (Wrap or Wraparound) in CAI Content Credentials that can cause an application denial-of-service by crashing the process. Exploitation does not require user interaction and is described with a LOCAL attack ve...
CVE-2026-48312
CVE-2026-48312 concerns CAI Content Credentials with improper input validation that enables a security feature bypass and unauthorized write access. The CVSS 3.1 vector indicates a local attack with low attack complexity and no user interaction, resulting in low confidentiality impact and high in...
CVE-2026-48437
CVE-2026-48437 affects CAI Content Credentials and is due to Improper Certificate Validation, enabling a security feature bypass and unauthorized write access. Exploitation requires user interaction (victim visits a malicious URL or interacts with a compromised page). CVSS 3.1 base score 5.5 (Med...
CVE-2026-48295
Technical details about CVE-2026-48295 are not publicly available in the provided documents. Monitor for updates from official sources; the available information notes insufficiently protected credentials and potential unauthorized read access without user interaction.
CVE-2026-48353
CVE-2026-48353 affects CAI Content Credentials. The issue is an Improper Input Validation (CWE-20) that could enable an attacker to read arbitrary files on the filesystem outside the intended scope. Exploitation requires user interaction, as a victim must open a malicious file. The CVSS v3.1 base...
CVE-2026-48387
CVE-2026-48387 affects CAI Content Credentials and is caused by an integer overflow/wraparound that can crash the application, resulting in a denial-of-service. Exploitation is possible without user interaction and requires local access (per CVSS metrics: AV:L, AC:L, PR:N, UI:N, S:U, A:H). The co...
CVE-2026-48446
CVE-2026-48446 affects CAI Content Credentials. The issue is an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) that could allow reading arbitrary files on the system outside the intended scope. Exploitation requires user interaction; a victim must visit a malicious U...
CVE-2026-48354
CVE-2026-48354 concerns CAI Content Credentials and describes an Integer Overflow or Wraparound (CWE-190) that could cause an application denial-of-service. Exploitation does not require user interaction and could crash the application. The available documents confirm the impact (availability los...
CVE-2026-48434
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability (CVE-2026-48434) that could exhaust resources and cause application DoS. Exploitation does not require user interaction and is indicated as local with no privileges required; impact is Availability High, wit...
CVE-2026-48442
CAI Content Credentials is affected by a Path Traversal vulnerability (CVE-2026-48442) that could allow an arbitrary file system read outside restricted directories. The issue arises from an improper limitation of a pathname to a restricted directory. Exploitation does not require user interactio...
CVE-2026-48445
CAI Content Credentials is affected by an Integer Overflow/Wraparound vulnerability (CVE-2026-48445) that could cause an application denial-of-service. According to the sources, exploitation does not require user interaction and the attack vector is local. The CVSS 3.1 data indicates a Medium bas...
CVE-2026-71360
CAI Content Credentials (Adobe) is affected by an Uncontrolled Resource Consumption vulnerability (CWE-400) that can lead to an application denial-of-service . An unauthenticated, network-based attacker can exhaust system resources without user interaction, causing an availability impact rated HI...
CVE-2026-48351
CVE-2026-48351 concerns CAI Content Credentials and describes an Improper Input Validation (CWE-20) vulnerability that could cause an application denial-of-service. The issue is triggered by invalid input processing and can crash the application, resulting in a DoS condition. Exploitation does no...
CVE-2026-48436
Affected software/area: CAI Content Credentials. Vulnerability type: Improper Input Validation leading to a security feature bypass. Root cause / nature: Input validation flaw could allow bypass of security measures, enabling unauthorized write access. Impact: Security feature bypass with unautho...
CVE-2026-71390
CAI Content Credentials is affected by an Improper Input Validation vulnerability (CWE-20) that could bypass security features and grant unauthorized limited write access. CVE-2026-71390; impact details: local attacker, no user interaction required, with a base CVSSv3.1 score of 4.0 (Medium). Exp...
CVE-2026-48302
The CVE-2026-48302 entry concerns CAI Content Credentials with an Improper Input Validation (CWE-20) vulnerability that can cause an application denial-of-service. The vulnerability description notes an in-app crash leading to DoS, with exploitation not requiring user interaction. The CVSS 3.1 ve...
CVE-2026-76194
The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20) that could lead to a Security feature bypass . An attacker could exploit this to gain unauthorized limited write access by tricking a victim into visiting a maliciously crafted URL or interacti...
CVE-2026-48435
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could crash the application, leading to a denial-of-service. Exploitation does not require user interaction and is reported with a LOCAL attack vector (per the CVSS data). The provided documents do...
CVE-2026-71389
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) that can crash the application and cause a denial-of-service. The issue does not require user interaction and is described as a local attack with no privileges required. The available sources (NVD entries and CVE rec...
CVE-2026-100123
The Adobe Content Credentials SDK is affected by an Improper Certificate Validation vulnerability (CWE-295). An attacker can exploit this flaw to bypass security measures and gain unauthorized write access to the file system. This vulnerability can be exploited remotely without user interaction. ...
CVE-2026-19480
The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20) that can lead to a Security feature bypass . An attacker could exploit this flaw to bypass security measures and gain unauthorized write access . Notably, exploitation of this issue does not re...
CVE-2026-71443
CAI Content Credentials (Adobe) is affected by an Improper Input Validation vulnerability (CWE-20) that can lead to an application denial-of-service . An attacker can crash the application over the network with low complexity , no privileges , and no user interaction required, resulting in a high...
CVE-2026-75634
CAI Content Credentials is affected by an Improper Input Validation vulnerability (CWE-20) that could result in a Security feature bypass . An attacker could leverage this flaw to bypass security measures and obtain unauthorized limited write access . Successful exploitation requires user interac...
CVE-2026-75638
The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to bypass security features and obtain unauthorized write access . Successful exploitation requires user interaction , such as a victim visiting a maliciously...
CVE-2026-71442
CAI Content Credentials (Adobe's Content Authenticity SDK) is affected by an integer underflow (wrap/wraparound, CWE-191) that can cause the application to crash, resulting in a denial-of-service . The vulnerability is exploitable over the network with low complexity , requires no user interactio...
CVE-2026-75633
CAI Content Credentials is impacted by an Improper Input Validation vulnerability (CWE-20). An attacker can exploit this flaw to crash the application, resulting in a denial-of-service (DoS) condition. Successful exploitation requires user interaction , such as a victim visiting a maliciously cra...
CVE-2026-76198
CAI Content Credentials (Adobe) is affected by an Improper Input Validation flaw (CWE-20) that can lead to arbitrary file system read , allowing an attacker to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction — a victim must open a m...
CVE-2026-100114
The CAI Content Credentials software is affected by an Improper Access Control vulnerability (CWE-284 ), which can lead to a security feature bypass . An attacker could exploit this flaw to bypass security measures and obtain unauthorized write access . The vulnerability is exploitable over the n...
CVE-2026-102501
The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20). An attacker can exploit this flaw to bypass security features and obtain unauthorized limited write access without any user interaction. The vulnerability is classified as a Security feature b...
CVE-2026-103296
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. This flaw could allow an attacker to bypass security measures and gain unauthorized write access . Exploitation of this vulnerability does not require any user interaction. No speci...
CVE-2026-103297
The CAI Content Credentials software is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. An attacker could exploit this flaw to bypass security measures and achieve unauthorized write access . The vulnerability does not require any user interaction to explo...
CVE-2026-48378
CAI Content Credentials is impacted by an Improper Input Validation (CWE-20) vulnerability. This flaw allows an attacker to bypass security measures and obtain unauthorized limited write access . The vulnerability does not require user interaction to exploit. No specific remediation information o...
CVE-2026-75632
The CAI Content Credentials software is affected by an Uncontrolled Resource Consumption vulnerability (CWE-400). An attacker can exploit this flaw to exhaust system resources, leading to an application denial-of-service (DoS) condition. The vulnerability is exploitable over the network without r...
CVE-2026-76189
CAI Content Credentials (Adobe) is affected by an Integer Underflow (CWE-191) that can crash the application, resulting in a denial-of-service . The attack vector is local , requires no privileges and no user interaction , with high availability impact (CVSS 3.1: 6.2 MEDIUM ). No exploitation det...
CVE-2026-71444
CAI Content Credentials (Adobe Content Authenticity SDK) is affected by an Integer Underflow (CWE-191) that can cause an application crash, leading to a denial-of-service condition. Exploitation requires a local attack vector, no privileges, and no user interaction . The CVSS 3.1 base score is 6....
CVE-2026-100119
CAI Content Credentials is impacted by an Improper Input Validation vulnerability (CWE-20). This flaw allows an attacker to bypass security measures to gain unauthorized write access without requiring any user interaction. While the vulnerability's root cause is not specified in detail, it is cat...
CVE-2026-100139
The CAI Content Credentials software is impacted by an Uncontrolled Resource Consumption vulnerability (CWE-400). An attacker can exploit this issue to exhaust system resources, leading to an application denial-of-service condition. This vulnerability is exploitable over the network with low comp...
CVE-2026-105902
The CAI Content Credentials software is impacted by an Uncontrolled Resource Consumption vulnerability (CWE-400). An attacker can exploit this flaw to exhaust system resources, leading to an application denial-of-service condition. The vulnerability does not require any user interaction. No speci...
CVE-2026-89277
The CAI Content Credentials software is vulnerable to an Integer Overflow or Wraparound (CWE-190) vulnerability. An attacker could exploit this flaw to cause an application crash, resulting in a denial-of-service (DoS) condition. Exploitation requires user interaction, such as a victim visiting a...
CVE-2026-95633
The CAI Content Credentials software is affected by an Improper Verification of Cryptographic Signature (CWE-347) vulnerability. An attacker can exploit this flaw to bypass security measures and obtain unauthorized write access without requiring any user interaction. The vulnerability results in ...