Adobe Patches About 110 Vulnerabilities Across Nine Products
Summary
Adobe’s November 2026 updates address about 110 vulnerabilities across nine products. Critical flaws in Connect and AEM include six Connect issues rated CVSS 10; Adobe says it is unaware of exploitation.
Key points
- Patches cover AEM, Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.
- Critical vulnerabilities were patched in Connect and AEM; six Connect flaws had a CVSS score of 10.
- The flaws include SSRF, path traversal, authorization errors, code injection, SQL injection, XXE, and XSS.
- Across AEM and Connect, 38 vulnerabilities could enable outcomes including privilege escalation, file-system reads, and arbitrary code execution.
- Adobe says it is unaware of attacks exploiting the newly patched vulnerabilities.
Article Details
- Event Type
- Adobe security updates addressing vulnerabilities across nine products
- Impact
- Adobe patched roughly 110 vulnerabilities, including critical flaws in Adobe Connect and Adobe Experience Manager (AEM), six Connect vulnerabilities rated CVSS 10, and high-severity flaws in several other products. Reported potential impacts include privilege escalation, file-system reads, memory exposure, arbitrary code execution, and security-feature bypass. Adobe said it was not aware of attacks exploiting the newly patched vulnerabilities.
Vendors
Products
Adobe Experience Manager (AEM)New patches are available for Adobe Experience Manager (AEM), Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.After EffectsNew patches are available for Adobe Experience Manager (AEM), Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.AuditionNew patches are available for Adobe Experience Manager (AEM), Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.ConnectNew patches are available for Adobe Experience Manager (AEM), Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.Content Credentials Rust SDKThe Content Credentials Rust SDK (and the C2PA Tool) received patches for roughly a dozen low- and medium-severity issues.Content Credentials SDKNew patches are available for Adobe Experience Manager (AEM), Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.DimensionNew patches are available for Adobe Experience Manager (AEM), Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.Media EncoderNew patches are available for Adobe Experience Manager (AEM), Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.PhotoshopNew patches are available for Adobe Experience Manager (AEM), Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.PremiereNew patches are available for Adobe Experience Manager (AEM), Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.