Adobe Connect Desktop Application — known CVE vulnerabilities

Every CVE whose affected-product data names Adobe Connect Desktop Application, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2025-27203 — CVSS 9.6 (critical): Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code…
• CVE-2026-27303 — CVSS 9.6 (critical): Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in…
• CVE-2026-34659 — CVSS 9.6 (critical): Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could…
• CVE-2026-27243 — CVSS 9.3 (critical): Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could…
• CVE-2026-27246 — CVSS 9.3 (critical): Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could…
• CVE-2026-34660 — CVSS 9.3 (critical): Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in…
• CVE-2026-34615 — CVSS 9.3 (critical): Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in…
• CVE-2026-27245 — CVSS 9.3 (critical): Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could…
• CVE-2026-34617 — CVSS 8.7 (high): Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could result in privilege…
• CVE-2026-34614 — CVSS 6.1 (medium): Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is…
• CVE-2026-21331 — CVSS 6.1 (medium): Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is…