Adobe c2pa vulnerabilities

94 CVEs affecting Adobe c2pa, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-95634, published 2026-10-13.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-34711, published 2026-06-09. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnerability to crash the…
• CVE-2026-71443, published 2026-08-25. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the…
• CVE-2026-48352, published 2026-07-14. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the…
• CVE-2026-48351, published 2026-07-14. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the…
• CVE-2026-34712, published 2026-06-09. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the…
• CVE-2026-75632, published 2026-09-22. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust…
• CVE-2026-71442, published 2026-08-25. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to…
• CVE-2026-71360, published 2026-08-25. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust…
• CVE-2026-48439, published 2026-08-11. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust…
• CVE-2026-48438, published 2026-08-11. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the…

Latest

• CVE-2026-95634, published 2026-10-13. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction.…
• CVE-2026-95633, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability…
• CVE-2026-95632, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability…
• CVE-2026-48378, published 2026-10-13. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security…
• CVE-2026-48377, published 2026-10-13. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security…
• CVE-2026-106627, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust…
• CVE-2026-105902, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust…
• CVE-2026-104345, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security…
• CVE-2026-103820, published 2026-10-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker…
• CVE-2026-103297, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability…