NVD や CVE、ほか複数の脅威フィードを束ね、RCE など高リスクな事象を深く追える一覧です。CVSS と EPSS を組み合わせ、Exploit 参照や PoC の有無から悪用しやすさを追跡します。ベンダー修正や緩和策の文脈とあわせて優先度を決め、対応サイクルを短く保ちつつ重要資産を守る支援をします。
Assigner（CNA／発行元）：[email protected] この条件を外す
| CVE | 説明 | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|
| CVE-2026-27264 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 該当なし | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27263 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 該当なし | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27261 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 該当なし | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27260 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 該当なし | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27259 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 該当なし | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2025-54277 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 該当なし | 0.07% | 2025-10-14 | 2025-10-17 |
| CVE-2026-27221 | Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user interaction. | 5.5 | 0.10% | 2026-03-10 | 2026-06-17 |
| CVE-2025-64897 | ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service. Exploitation of this issue requires user interaction. | 5.6 | 0.11% | 2025-12-09 | 2026-06-17 |
| CVE-2026-27258 | DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.12% | 2026-04-14 | 2026-06-17 |
| CVE-2026-34704 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-06-09 | 2026-06-17 |
| CVE-2026-34703 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-06-09 | 2026-06-17 |
| CVE-2026-27218 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-27217 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to its availability. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-27215 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to its availability. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-27214 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-21364 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-21363 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2025-54271 | Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing unauthorized modifications to files. Exploitation of this issue does not require user interaction. | 5.6 | 0.13% | 2025-10-15 | 2026-06-17 |
| CVE-2026-47910 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed. | 6.3 | 0.14% | 2026-06-09 | 2026-06-17 |
| CVE-2026-47925 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.14% | 2026-06-09 | 2026-06-17 |