Threat database

Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Acrobat contains an out-of-bounds read vulnerability that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects certain versions of Adobe Acrobat up to 26.002.21900 and 24.001.30383. The issue has a medium severity rating with a CVSS score of 5.5.

Adobe Acrobat contains an out-of-bounds write vulnerability (CWE-787) that may allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The issue has a high severity rating with a CVSS score of 7.8.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 7.8, indicating a high severity issue.

Adobe Acrobat contains an out-of-bounds write vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction for exploitation and affects multiple versions of Adobe Acrobat up to specified builds. The issue is classified as high severity due to its potential impact on confidentiality, integrity, and availability.

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

Adobe Experience Manager as a Cloud Service is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the context of a victim's browser. Exploitation requires user interaction, specifically that the victim visits a crafted webpage. The vulnerability affects certain versions up to 2026.7.0, SP2, and 6.5.24. The CVSS score is 5.4, indicating a medium severity level.

Adobe Experience Manager as a Cloud Service is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects certain versions up to 2026.7.0, SP2, and 6.5.24. The CVSS score is 5.4, indicating a medium severity level.

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

Adobe Experience Manager as a Cloud Service is affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2026-75734). This flaw allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, which execute in the browsers of users who visit the affected pages. The vulnerability has a medium severity rating with a CVSS score of 5.4. No explicit patch or remediation details are provided in the available data.

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

Adobe Experience Manager as a Cloud Service is affected by a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim visits a page containing the vulnerable field, the malicious JavaScript may execute in their browser. This vulnerability has a medium severity rating with a CVSS score of 5.4.

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

Adobe Experience Manager as a Cloud Service is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects multiple versions including up to 2026.7.0, SP2, and 6.5.24. The CVSS score is 5.4, indicating a medium severity level.

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

Adobe Experience Manager as a Cloud Service is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects certain versions up to 2026.7.0, SP2, and 6.5.24. The CVSS score is 5.4, indicating a medium severity level.

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.

Adobe Experience Manager as a Cloud Service is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction, specifically that the victim visits a crafted webpage. The vulnerability impacts confidentiality and integrity but not availability. The severity is rated medium with a CVSS score of 5.4.