聚合 NVD、CVE 及多源情資，深度解析 RCE 等高危風險。系統整合 CVSS 與 EPSS 模型，動態追蹤 Exploit 資源與 PoC 公開狀態，研判可利用性。結合官方修補與修復方案，優化漏洞管理優先級，縮短回應週期，保障資產安全。
指派機構（CNA / 來源）：[email protected] 移除此篩選
| CVE | 描述 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|
| CVE-2026-27264 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 無 | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27263 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 無 | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27261 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 無 | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27260 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 無 | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2026-27259 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 無 | 0.03% | 2026-03-10 | 2026-03-16 |
| CVE-2025-54277 | Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority. | 無 | 0.07% | 2025-10-14 | 2025-10-17 |
| CVE-2026-27221 | Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user interaction. | 5.5 | 0.10% | 2026-03-10 | 2026-06-17 |
| CVE-2025-64897 | ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service. Exploitation of this issue requires user interaction. | 5.6 | 0.11% | 2025-12-09 | 2026-06-17 |
| CVE-2026-27258 | DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt memory, causing the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.12% | 2026-04-14 | 2026-06-17 |
| CVE-2026-34704 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-06-09 | 2026-06-17 |
| CVE-2026-34703 | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-06-09 | 2026-06-17 |
| CVE-2026-27218 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-27217 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to its availability. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-27215 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to its availability. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-27214 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-21364 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2026-21363 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.13% | 2026-03-10 | 2026-06-17 |
| CVE-2025-54271 | Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing unauthorized modifications to files. Exploitation of this issue does not require user interaction. | 5.6 | 0.13% | 2025-10-15 | 2026-06-17 |
| CVE-2026-47910 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed. | 6.3 | 0.14% | 2026-06-09 | 2026-06-17 |
| CVE-2026-47925 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 5.5 | 0.14% | 2026-06-09 | 2026-06-17 |