Aggregating NVD, CVE, and multi-source threat feeds, this list provides deep analysis of high-risk threats such as RCE. By integrating CVSS and EPSS models, the system dynamically tracks Exp (Exploit) resources and PoC availability to accurately assess Exploitability. Combined with official Patches and remediation strategies, it helps prioritize Vulnerability Management workflows, significantly shortening response cycles and securing your critical assets.
Assigner (CNA / source)：[email protected] Remove this filter
| CVE | Description | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|
| CVE-2026-27264 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | N/A | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27263 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | N/A | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27261 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | N/A | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27260 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | N/A | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27259 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | N/A | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2025-54277 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | N/A | 0.07% | 2025-10-14 | 2025-10-17 |
| CVE-2026-27221 | Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user interaction. | 5.5 | 0.10% | 2026-03-10 | 2026-06-17 |
| CVE-2025-64897 | ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service. Exploitation of this issue requires user interaction. | 5.6 | 0.11% | 2025-12-09 | 2026-06-17 |
| CVE-2026-27258 | DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.12% | 2026-04-14 | 2026-06-17 |
| CVE-2026-34704 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-06-09 | 2026-06-17 |
| CVE-2026-34703 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-06-09 | 2026-06-17 |
| CVE-2026-27218 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-27217 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to its availability. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-27215 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to its availability. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-27214 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-21364 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-21363 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2025-54271 | Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing unauthorized modifications to files. Exploitation of this issue does not require user interaction. | 5.6 | 0.13% | 2025-10-15 | 2026-06-17 |
| CVE-2026-47910 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed. | 6.3 | 0.14% | 2026-06-09 | 2026-06-17 |
| CVE-2026-47925 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.14% | 2026-06-09 | 2026-06-17 |