Adobe Dng Software Development Kit vulnerabilities

23 CVEs affecting Adobe Dng Software Development Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-34620, published 2026-08-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4167, published 2016-06-16. Critical severity, CVSS 9.8. EPSS: 5.4% chance of exploitation in the next 30 days. Adobe DNG Software Development Kit (SDK) before 1.4 2016 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2020-9628, published 2020-06-26. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2020-9627, published 2020-06-26. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2020-9625, published 2020-06-26. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2026-27258, published 2026-04-14. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.…
CVE-2026-48389, published 2026-07-20. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2026-47964, published 2026-06-16. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2026-27280, published 2026-03-10. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…
CVE-2026-47963, published 2026-06-16. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
CVE-2026-47934, published 2026-06-16. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…

Latest

CVE-2026-34620, published 2026-08-27. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to application denial-of-service. An attacker could leverage this vulnerability to corrupt…
CVE-2026-34616, published 2026-08-27. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive…
CVE-2026-48267, published 2026-07-06. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to…
CVE-2026-47927, published 2026-06-16. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to…
CVE-2026-27281, published 2026-03-10. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. DNG SDK versions 1.7.1 2471 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability…