Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-34687 | 7.8 high | 0.00% | adobe, illustrator | Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Mon 26 Oct |
| CVE-2026-34682 | 7.8 high | 0.00% | adobe, substance_3d_designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Mon 26 Oct |
| CVE-2026-34683 | 7.8 high | 0.00% | adobe, substance_3d_designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Mon 26 Oct |
| CVE-2026-47965 | 7.8 high | 0.00% | adobe, acrobat, acrobat_dc, acrobat_reader_dc | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Mon 26 Oct |
| CVE-2026-34640 | 7.8 high | 0.00% | adobe, media_encoder | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Mon 26 Oct |
| CVE-2026-34681 | 7.8 high | 0.00% | adobe, substance_3d_designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Mon 26 Oct |
| CVE-2026-34684 | 7.8 high | 0.00% | adobe, substance_3d_designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Mon 26 Oct |
| CVE-2026-34661 | 7.8 high | 0.00% | adobe, illustrator | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sun 25 Oct |
| CVE-2026-47964 | 7.8 high | 0.00% | adobe, dng_software_development_kit | DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sun 25 Oct |
| CVE-2026-47967 | 7.8 high | 0.00% | adobe, audition | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-47968 | 7.8 high | 0.00% | adobe, audition | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48309 | 7.8 high | 0.00% | adobe, audition | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48365 | 7.8 high | 0.00% | adobe, audition | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48368 | 7.8 high | 0.00% | adobe, audition | Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-47971 | 7.8 high | 0.00% | adobe, media_encoder | Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-47976 | 7.8 high | 0.00% | adobe, media_encoder | Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48269 | 7.8 high | 0.00% | adobe, premiere_pro | Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48270 | 7.8 high | 0.00% | adobe, premiere_pro | Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48272 | 7.8 high | 0.00% | adobe, creative_cloud_desktop_application | Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed. | Sat 24 Oct |
| CVE-2026-48274 | 7.8 high | 0.00% | adobe, after_effects | After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48311 | 7.8 high | 0.00% | adobe, bridge | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48339 | 7.8 high | 0.00% | adobe, bridge | Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48340 | 7.8 high | 0.00% | adobe, bridge | Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48341 | 7.8 high | 0.00% | adobe, bridge | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48342 | 7.8 high | 0.00% | adobe, bridge | Bridge is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48343 | 7.8 high | 0.00% | adobe, bridge | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48344 | 7.8 high | 0.00% | adobe, creative_cloud_desktop_application | Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed. | Sat 24 Oct |
| CVE-2026-48366 | 7.8 high | 0.00% | adobe, media_encoder | Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48367 | 7.8 high | 0.00% | adobe, after_effects | After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48369 | 7.8 high | 0.00% | adobe, premiere_pro | Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48370 | 7.8 high | 0.00% | adobe, media_encoder | Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48373 | 7.8 high | 0.00% | adobe, acrobat, acrobat_dc, acrobat_reader_dc | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48389 | 7.8 high | 0.00% | adobe, dng_software_development_kit | DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Sat 24 Oct |
| CVE-2026-48372 | 7.8 high | 0.00% | adobe, format_plugins | Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48374 | 7.8 high | 0.00% | adobe, bridge | Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48392 | 7.8 high | 0.00% | adobe, bridge | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48393 | 7.8 high | 0.00% | adobe, bridge | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48394 | 7.8 high | 0.00% | adobe, bridge | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-34641 | 7.8 high | 0.00% | adobe, premiere, premiere_pro | Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-47940 | 7.8 high | 0.00% | adobe, lightroom | Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48404 | 7.8 high | 0.00% | adobe, lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48405 | 7.8 high | 0.00% | adobe, lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48406 | 7.8 high | 0.00% | adobe, lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48407 | 7.8 high | 0.00% | adobe, lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48408 | 7.8 high | 0.00% | adobe, lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48409 | 7.8 high | 0.00% | adobe, lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-48410 | 7.8 high | 0.00% | adobe, lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Fri 23 Oct |
| CVE-2026-83661 | 7.8 high | 0.00% | adobe, photoshop | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 22 Oct |
| CVE-2026-95635 | 7.8 high | 0.00% | adobe, photoshop | Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 22 Oct |
| CVE-2026-95636 | 7.8 high | 0.00% | adobe, photoshop | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 22 Oct |
Download these 466 as CSV · subscribe to this list.
EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.