Adobe Format Plugins vulnerabilities

12 CVEs affecting Adobe Format Plugins, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-48372, published 2026-07-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-48372, published 2026-07-28. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-48292, published 2026-06-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2026-48291, published 2026-06-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2025-61837, published 2025-11-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2025-61839, published 2025-11-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Format Plugins versions 1.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.…
CVE-2025-61838, published 2025-11-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2025-61842, published 2025-11-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Format Plugins versions 1.1.1 and earlier are affected by a Use After Free vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive…
CVE-2025-61845, published 2025-11-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive…
CVE-2025-61844, published 2025-11-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive…
CVE-2025-61843, published 2025-11-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive…

Latest

CVE-2025-61841, published 2025-11-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive…
CVE-2025-61840, published 2025-11-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive…