Adobe Connect Desktop Application vulnerabilities

11 CVEs affecting Adobe Connect Desktop Application, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-34660, published 2026-05-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-34659, published 2026-05-12. Critical severity, CVSS 9.6. EPSS: 1.9% chance of exploitation in the next 30 days. Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-27303, published 2026-04-14. Critical severity, CVSS 9.6. EPSS: 1.9% chance of exploitation in the next 30 days. Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.…
CVE-2026-34615, published 2026-04-14. Critical severity, CVSS 9.3. EPSS: 1.8% chance of exploitation in the next 30 days. Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An…
CVE-2025-27203, published 2025-07-08. Critical severity, CVSS 9.6. EPSS: 1.2% chance of exploitation in the next 30 days. Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does…
CVE-2026-34660, published 2026-05-12. Critical severity, CVSS 9.3. EPSS: 1% chance of exploitation in the next 30 days. Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An…
CVE-2026-27246, published 2026-04-14. Critical severity, CVSS 9.3. EPSS: 0.7% chance of exploitation in the next 30 days. Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a…
CVE-2026-27245, published 2026-04-14. Critical severity, CVSS 9.3. EPSS: 0.7% chance of exploitation in the next 30 days. Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a…
CVE-2026-27243, published 2026-04-14. Critical severity, CVSS 9.3. EPSS: 0.7% chance of exploitation in the next 30 days. Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a…
CVE-2026-34617, published 2026-04-14. High severity, CVSS 8.7. EPSS: 0.7% chance of exploitation in the next 30 days. Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this…
CVE-2026-34614, published 2026-04-14. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a…

Latest

CVE-2026-21331, published 2026-04-14. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a…