CVE-2025-27203: Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an…

PriorityP351critical9.6CVSS 3.1

AVNACLPRNUIRSCCHIHAH

EPSS

0.99%

58.9th percentile

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
adobe	adobe_connect	<= 24.0	—
adobe	connect_desktop_application	< 2025.5.5	2025.5.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.