CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 09:00 UTC)

What this means for you

This week: 5,436 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,436; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product adobe:dng_software_development_kit. Show all products

19 CVEs, showing 1 to 19

CVE	Severity	Title	Published
CVE-2025-64783	High 7.8	DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.	Dec 9, 2025
CVE-2025-64784	High 7.1	DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service.	Dec 9, 2025
CVE-2025-64893	High 7.1	DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure or application denial of service.	Dec 9, 2025
CVE-2025-64894	Medium 5.5	DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service.	Dec 9, 2025
CVE-2026-21352	High 7.8	DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.	Feb 10, 2026
CVE-2026-21353	High 7.8	DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.	Feb 10, 2026
CVE-2026-21354	Medium 5.5	DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service.	Feb 10, 2026
CVE-2026-21355	Medium 5.5	DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure.	Feb 10, 2026
CVE-2026-27280	High 7.8	DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.	Mar 10, 2026
CVE-2026-27281	Medium 5.5	DNG SDK versions 1.7.1 2471 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service.	Mar 10, 2026
CVE-2026-27258	Medium 5.4	Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.	Apr 14, 2026
CVE-2026-47927	Medium 5.5	DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.	Jun 16, 2026
CVE-2026-47934	Medium 5.5	DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.	Jun 16, 2026
CVE-2026-47963	Medium 5.5	DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.	Jun 16, 2026
CVE-2026-47964	High 7.8	DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.	Jun 16, 2026
CVE-2026-48267	Medium 5.5	DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.	Jul 6, 2026
CVE-2026-48389	High 7.8	DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.	Jul 20, 2026
CVE-2026-34620	Medium 5.5	DNG SDK \| Out-of-bounds Write (CWE-787) Assigned by adobe	Aug 27, 2026
CVE-2026-34616	Medium 5.5	DNG SDK \| Out-of-bounds Read (CWE-125) Assigned by adobe	Aug 27, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.