Adobe Multiple Vulnerabilities

Multiple critical vulnerabilities were identified recently in Adobe products, including Adobe Acrobat.  The vulnerabilities may expose the systems to the risks such as Cross-site scripting, Remote Code Execution, Security Restriction Bypass, Denial of Service, Data Manipulation, Information Disclosure, Elevation of Privilege, etc.  Users are urged to update the affected Adobe products to the latest version.

Vulnerability

• Multiple Vulnerabilities

Severity Level

• From Critical to Information

Affected products and versions

• Adobe Acrobat 26.001.21651 and earlier versions
• Acrobat Reader 26.001.21651 and earlier versions
• Acrobat 2024 24.001.30365 and earlier versions
• ColdFusion 2025 Update 8 and earlier versions
• ColdFusion 2023 Update 19 and earlier versions
• Adobe Dreamweaver  21.7 and earlier versions
• Adobe Experience Manager (AEM) AEM Cloud Service (CS)
• Adobe Experience Manager (AEM) 6.5 LTS SP1 and earlier versions
• Adobe Experience Manager (AEM) SP24 and earlier versions
• Adobe Experience Manager 6.5 LTS SP1 and earlier versions
• Adobe Experience Manager 6.5 6.5.24.0 and earlier versions
• Adobe InDesign ID21.3 and earlier versions
• Adobe InDesign ID20.5.3 and earlier versions
• Adobe InCopy  21.3 and earlier versions
• Adobe InCopy  20.5.3 and earlier versions
• Adobe Substance 3D Sampler 6.0.0 and earlier versions
• Content Credentials JS SDK @contentauth/c2pa-web@0.7.1 and earlier versions
• Content Credentials Rust SDK c2pa-v0.80.1 and earlier versions
• Adobe Format Plugins 1.1.2 and earlier versions
• Adobe Campaign Classic ACC v7: 7.4.3 build 9394 and earlier versions

Remediation

• Update the affected Adobe software to the latest version ASAP.
• If you are still using Acrobat Pro 2020, please uninstall it as soon as possible.  Recommended alternatives for replacing Acrobat Pro 2020 includes:
  • Subscription-based Adobe Acrobat
  • Foxit PDF Editor

Reference

• Adobe: Adobe Product Security Incident Response Team
• Adobe: Adobe Security Bulletin for Adobe Acrobat Reader
• HKCERT: Adobe Monthly Security Update (June 2026)

Published on: 11 Jun 2026