CVE-20XX-?

Adobe c2pa CVEs.

Published CVEs affecting Adobe c2pa, ranked by exploit odds.

94 CVEs · updated 2026-11-06 03:02 UTC

  1. CVE-2026-71443

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.9% exploit odds Fix listed
  2. CVE-2026-48351

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.9% exploit odds Fix listed
  3. CVE-2026-48352

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.9% exploit odds Fix listed
  4. CVE-2026-48438

    CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

    Memory safety Adobe c2pa

    7.5 HIGH 0.9% exploit odds Fix listed
  5. CVE-2026-48439

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.9% exploit odds Fix listed
  6. CVE-2026-71360

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.9% exploit odds Fix listed
  7. CVE-2026-71442

    CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.9% exploit odds Fix listed
  8. CVE-2026-75632

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.9% exploit odds Fix listed
  9. CVE-2026-48295

    CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage this vulnerability to gain unauthorized read access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    7.5 HIGH 0.8% exploit odds Fix listed
  10. CVE-2026-34665

    CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.8% exploit odds Fix listed
  11. CVE-2026-19480

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    7.5 HIGH 0.8% exploit odds Fix listed
  12. CVE-2026-48436

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

    Other Web app Adobe c2pa

    6.5 MEDIUM 0.7% exploit odds Fix listed
  13. CVE-2026-75638

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

    Other Adobe c2pa

    6.5 MEDIUM 0.7% exploit odds Fix listed
  14. CVE-2026-100138

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.7% exploit odds Fix listed
  15. CVE-2026-106627

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.7% exploit odds Fix listed
  16. CVE-2026-100113

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    7.5 HIGH 0.6% exploit odds Fix listed
  17. CVE-2026-100117

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    7.5 HIGH 0.6% exploit odds Fix listed
  18. CVE-2026-100124

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    7.5 HIGH 0.6% exploit odds Fix listed
  19. CVE-2026-100135

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    7.5 HIGH 0.6% exploit odds Fix listed
  20. CVE-2026-75634

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

    Other Adobe c2pa

    4.3 MEDIUM 0.6% exploit odds Fix listed
  21. CVE-2026-76194

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

    Other Adobe c2pa

    4.3 MEDIUM 0.6% exploit odds Fix listed
  22. CVE-2026-100125

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    5.9 MEDIUM 0.6% exploit odds Fix listed
  23. CVE-2026-100136

    CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

    Memory safety Adobe c2pa

    7.5 HIGH 0.6% exploit odds Fix listed
  24. CVE-2026-47922

    CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

    Disclosure Server Adobe c2pa

    4.7 MEDIUM 0.6% exploit odds Fix listed
  25. CVE-2026-100137

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  26. CVE-2026-100139

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  27. CVE-2026-105902

    CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  28. CVE-2026-95634

    CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

    Disclosure Server Adobe c2pa

    8.6 HIGH 0.5% exploit odds Fix listed
  29. CVE-2026-100119

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  30. CVE-2026-100120

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  31. CVE-2026-104345

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  32. CVE-2026-100114

    CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Auth & access Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  33. CVE-2026-100115

    CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Auth & access Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  34. CVE-2026-103296

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Crypto Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  35. CVE-2026-103297

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Crypto Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  36. CVE-2026-95632

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Crypto Adobe c2pa

    7.5 HIGH 0.5% exploit odds Fix listed
  37. CVE-2026-34711

    CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

    Memory safety Adobe c2pa

    7.5 HIGH 0.4% exploit odds Fix listed
  38. CVE-2026-34712

    CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.4% exploit odds Fix listed
  39. CVE-2026-34713

    CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

    Denial of service Adobe c2pa

    7.5 HIGH 0.4% exploit odds Fix listed
  40. CVE-2026-102501

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    5.3 MEDIUM 0.4% exploit odds Fix listed
  41. CVE-2026-48377

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    5.3 MEDIUM 0.4% exploit odds Fix listed
  42. CVE-2026-102502

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

    Crypto Adobe c2pa

    5.3 MEDIUM 0.4% exploit odds Fix listed
  43. CVE-2026-100118

    CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Crypto Adobe c2pa

    7.5 HIGH 0.4% exploit odds Fix listed
  44. CVE-2026-95633

    CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Crypto Adobe c2pa

    7.5 HIGH 0.3% exploit odds Fix listed
  45. CVE-2026-48378

    CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.

    Other Adobe c2pa

    5.3 MEDIUM 0.3% exploit odds Fix listed
  46. CVE-2026-48444

    CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

    Memory safety Adobe c2pa

    6.2 MEDIUM 0.3% exploit odds Fix listed
  47. CVE-2026-48442

    CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Arbitrary file system read. An attacker could leverage this vulnerability to gain unauthorized read access to files or directories outside the intended restrictions. Exploitation of this issue does not require user interaction. Scope is changed.

    Disclosure Adobe c2pa

    7.1 HIGH 0.3% exploit odds Fix listed
  48. CVE-2026-48290

    CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

    Disclosure Server Adobe c2pa

    8.2 HIGH 0.3% exploit odds Fix listed
  49. CVE-2026-48446

    CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

    Disclosure Web app Adobe c2pa

    5.5 MEDIUM 0.3% exploit odds Fix listed
  50. CVE-2026-100121

    CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

    Crypto Adobe c2pa

    7.5 HIGH 0.3% exploit odds Fix listed

All CVEs affecting Adobe c2pa that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.