C2PA Tool

Adobe Patches 110 Vulnerabilities Across Nine Products in November 2026 Update

Adobe has released its November 2026 Patch Tuesday updates that address roughly 110 vulnerabilities spread across nine products. The affected applications include Adobe Experience Manager, Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere. Critical-severity flaws with CVSS scores reaching 10 were fixed in Adobe Connect and AEM, covering issues such as SSRF, path traversal, XXE, SQL injection, and XSS that could enable privilege escalation and arbitrary code execution. A total of 38 vulnerabilities were resolved in AEM and Connect alone, including high- and medium-severity bugs leading to file system access and security bypasses. High-severity issues were also addressed in After Effects, Media Encoder, Premiere, Dimension, Audition, and Photoshop. The Content Credentials Rust SDK and C2PA Tool received fixes for about a dozen lower-severity problems. Adobe states it is unaware of any active exploitation of the newly patched flaws, with Connect and AEM updates carrying priority rating 2 while the remainder are rated 3.