CVE-2026-27303CRITICAL 9.6EPSS p44.6%

CVE-2026-27303CVE-2026-27303

Description

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Scoring

CVSS 3.19.6 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS0.61% probability of exploitation · percentile 44.6% · 2026-06-18T12:00:27Z
Published2026-04-14
Last modified2026-04-28

Underlying weaknesses· 1

CWE-502

References

  1. https://helpx.adobe.com/security/products/connect/apsb26-37.html

1

TypeTargetConfidenceTier
WeaknessDeserialization of Untrusted Datacwe-5020%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-27203
CVE
CVE-2026-34615
CVE
CVE-2026-34659
CVE
CVE-2026-27243
CVE
CVE-2026-34660
CVE
CVE-2025-49533
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.