Adobe Xmp Toolkit Software Development Kit vulnerabilities

28 CVEs affecting Adobe Xmp Toolkit Software Development Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-30309, published 2025-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-36051, published 2021-10-04. High severity, CVSS 7.8. EPSS: 5.8% chance of exploitation in the next 30 days. XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires…
CVE-2021-39847, published 2021-09-01. High severity, CVSS 7.8. EPSS: 5.4% chance of exploitation in the next 30 days. XMP Toolkit SDK version 2020.1 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user.…
CVE-2021-36050, published 2021-09-01. High severity, CVSS 7.8. EPSS: 5.4% chance of exploitation in the next 30 days. XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires…
CVE-2021-36056, published 2021-09-01. Medium severity, CVSS 5.5. EPSS: 4.4% chance of exploitation in the next 30 days. XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires…
CVE-2021-42532, published 2022-05-02. High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days. XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user.…
CVE-2021-42531, published 2022-05-02. High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days. XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user.…
CVE-2021-42530, published 2022-05-02. High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days. XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user.…
CVE-2021-42529, published 2022-05-02. High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days. XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user.…
CVE-2021-36054, published 2021-09-01. Low severity, CVSS 3.3. EPSS: 3.7% chance of exploitation in the next 30 days. XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the context of the current user.…
CVE-2021-36052, published 2021-09-01. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is…

Latest

CVE-2025-30309, published 2025-04-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass…
CVE-2025-30308, published 2025-04-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass…
CVE-2025-30307, published 2025-04-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass…
CVE-2025-30306, published 2025-04-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass…
CVE-2025-30305, published 2025-04-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass…
CVE-2023-38210, published 2023-08-10. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application…