Adobe c2pa-Web vulnerabilities

81 CVEs affecting Adobe c2pa-Web, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-95634, published 2026-10-13.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-34711, published 2026-06-09. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnerability to crash the…
• CVE-2026-48352, published 2026-07-14. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the…
• CVE-2026-48351, published 2026-07-14. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the…
• CVE-2026-34712, published 2026-06-09. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the…
• CVE-2026-48439, published 2026-08-11. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust…
• CVE-2026-48438, published 2026-08-11. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the…
• CVE-2026-34713, published 2026-06-09. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust…
• CVE-2026-34665, published 2026-05-12. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An…
• CVE-2026-48295, published 2026-07-14. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage this vulnerability to…
• CVE-2026-48436, published 2026-08-11. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security…

Latest

• CVE-2026-95634, published 2026-10-13. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction.…
• CVE-2026-95633, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability…
• CVE-2026-95632, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability…
• CVE-2026-48378, published 2026-10-13. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security…
• CVE-2026-48377, published 2026-10-13. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security…
• CVE-2026-106627, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust…
• CVE-2026-105902, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust…
• CVE-2026-104345, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security…
• CVE-2026-103820, published 2026-10-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker…
• CVE-2026-103297, published 2026-10-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability…