AdobeCVE-2026-83964
Adobe Connect: improper certificate validation
Medium6.2CVE-2026-83964 · Published Sep 22, 2026 · updated Sep 25, 2026
Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Adobe Connect Product | <= 12.11 | No fix yet |
| Adobe Connect Android Mobile App Product | <= 4.4 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-295
More Adobe advisories
All Adobe| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 22 | Adobe Content Credentials: integer overflow | Medium5.5 | No fix yet |
| Sep 22 | Adobe Substance3D - Modeler: out-of-bounds write | High7.8 | No fix yet |
| Sep 22 | Adobe Premiere: server-side request forgery | High7.1 | No fix yet |
| Sep 22 | Adobe InDesign Desktop: null pointer dereference | Medium5.5 | No fix yet |
| Sep 22 | Adobe Substance3D - Modeler: out-of-bounds write | High7.8 | No fix yet |
| Sep 22 | Adobe AEM 6.5: server-side request forgery | High8.7 | No fix yet |