CRITICAL🇵🇱 Wersja polska

CVE-2026-27303

CVSS 9.6v3.1pub. 2026-04-14upd. 2026-04-28

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Adobe Connect
APP
Adobe
< 12.11
Adobe Connect Desktop Application
APP
Adobe
≤ 2025.3< 2025.9.15
Apple macOS
OS
Apple
wszystkie wersje
Microsoft Windows
OS
Microsoft
wszystkie wersje

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

Tags

RCEDeserialization

CWE

References

helpx.adobe.com/security/products/connect/apsb26-37.htm…

Related vulnerabilities

CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-43300CRITICAL10.0⚠ KEVPL ✓ten sam produkt

Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu

CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP

CVE-2025-31200CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Apple — memory corruption (RCE) w przetwarzaniu strumieni audio