Threat database

Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary SQL commands. Exploitation of this issue does not require user interaction. Scope is changed.

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Adobe Campaign Classic is affected by a critical Incorrect Authorization vulnerability (CWE-863) that allows an attacker to execute arbitrary code in the context of the current user without requiring user interaction. The vulnerability changes the security scope, potentially leading to full compromise of confidentiality, integrity, and availability.

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.

Adobe Campaign Classic contains a Server-Side Request Forgery (SSRF) vulnerability that allows a low-privileged attacker to escalate privileges and gain elevated access to internal resources without user interaction. The vulnerability changes the security scope and has a critical severity rating.

Adobe Campaign Classic contains an improper input validation vulnerability that allows a low-privileged attacker to execute arbitrary code without user interaction. This vulnerability affects the context of the current user and changes the security scope. It is classified as critical with a CVSS score of 9.9.

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.

Adobe Campaign Classic contains a critical SQL Injection vulnerability (CVE-2026-82010) that allows a low-privileged attacker to execute arbitrary code without user interaction. The vulnerability involves improper neutralization of special elements in SQL commands, potentially leading to full compromise in the context of the current user. The scope of impact is changed, indicating that the vulnerability affects resources beyond the initially vulnerable component.

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction for exploitation and affects certain versions of Adobe Acrobat up to specified builds. The vulnerability has a high severity rating with a CVSS score of 7.8.

Adobe Acrobat contains an out-of-bounds read vulnerability that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects certain versions of Adobe Acrobat up to 26.002.21900 and 24.001.30383. The issue has a medium severity rating with a CVSS score of 5.5.

Adobe Acrobat Reader contains an out-of-bounds write vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction and affects multiple versions of Adobe Acrobat Reader up to specified build numbers. The issue is classified as high severity with a CVSS score of 7.8.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. No known exploits are reported in the wild. The CVSS score is 7.8, indicating high severity.

Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.